Why don't the GetOriginator*() methods work in OnFileOpenN and OnFileCreateN?

To keep the size of the operation log as small as possible, CBFS Filter doesn't store supplementary information about filesystem events for notifications. You need to switch to synchronous callbacks (the On*C callbacks) in order to obtain information about the originator process, user, etc.

Ready to get started?

Learn more about Callback Technologies or download a free trial.

Download Now