GetOriginator*() methods don't work in OnFileOpenN and OnFileCreateN. Why is it so?

To keep the size of the operation log as small as possible, CBFS Filter doesn't store supplementary information about filesystem events for notifications. You need to switch to synchronous callbacks (those On*C callbacks) in order to obtain information about originator process, user etc.

Ready to get started?

Learn more about Callback Technologies or download a free trial.

Download Now