The File Monitor Filter Driver SDK enables development of a file auditing Windows application to monitor real-time file changes and access, intercept file I/O requests, and track file usage by user, time and content.

The EaseFilter File Monitor SDK is a file system filter driver that operates as a kernel-mode component running above the file system. With this filter driver, you can intercept file system requests before they hit their intended target. This allows the filter driver to extend or replace functionalities provided by the original target of the request. The EaseFilter file system filter driver is capable of logging, observing, modifying, or even preventing I/O operations for one or more file systems or file system volumes.
With the EaseFilter File Monitor SDK, you will be notified when your managed files change. Some of the events that you can monitor include: file creation, file deletion, file renaming, file writing, file information changing, and file security changing. By knowing exactly when an event occurs, you can take corrective action immediately.
In terms of functionality, the EaseFilter File Monitor SDK gives you comprehensive control and visibility over users and data. By tracking and monitoring users and file activities, permission changes, and storage capacity, you can generate real-time audit reports that provide insight into your system's operations.
Overall, the EaseFilter File Monitor SDK is a powerful tool that provides you with total control over your Windows applications' file operations. Whether you are monitoring file systems or creating file auditors, this SDK is an excellent choice.
Version 5.1.7.2:
1. Added trusted process to control the filter rule.
2. Fixed the slow issue of the service starting.