问题
I need to monitor applications File Access in win 7 operating system. I want to monitor which software read, write or create file in which place. I think, this work is imposible with File System Watcher and auditing. how can I do this work with C#? Are there any appropriate APIs?
回答1:
You need a filesystem filter driver for fine-grain monitoring and tracking what applications access files. Developing a kernel-mode driver requires C programming and special knowledge. You can write a driver yourself (read MSDN article) or use our CallbackFilter product (it provides a pre-created driver and .NET API for integration with your software).
来源：https://stackoverflow.com/questions/11417658/monitoring-applications-file-access-in-windows