Question

Is there a way to access file system info via some type of Windows API? If not what other methods are available to a user mode developer?

Was it helpful?

Solution

Not very clean, but you can use DeviceIoControl() Open volume as a file, pass resulting handle to DeviceIoControl() together with control code. Check MSDN for control codes, there is something like "read journal record".

OTHER TIPS

In another post, someone recommended this : Keeping an Eye on Your NTFS Drives: the Windows 2000 Change Journal Explained.

It explains how to use the NTFS Filesystem with C++ through Windows 2000. The implementation might have changed.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top