Regarding Driver Design RRS feed

  • Question

  • Hi all

    I need your help in designing this driver
    I wrote a filter driver, which logs all file I/O operations (create/Read/ write and delete) and it is working fine.

    Now , I need to enhance this driver to make a copy of the file being deleted and move it to a specified location, a kind of Backup operation but done automatically by this driver.
    What is the best approach for  this driver, shall I open the file in the IRP_MJ_CLOSE  routine and create a new file in the specified location and then copy the file contents to the new file.
    And How do we handle if then file being deleted from the user mode is very large, should I have to queue any DPC etc.


    Thursday, November 29, 2012 11:14 AM