PDA

Click to See Complete Forum and Search --> : FileMonitor/RegMonitor / APIMonitor?


wolfrog
Sep 19th, 2000, 02:03 PM
HI AGAIN!

Somewhere in the internet there are tools like FILEMON, REGMON etc.
FILEMON monitors all files that are currently accessed by the operating system.
REGMON monitors all registry keys that all apps in windows read/write from.
How does these useful tools work?
Or you can find some "file protectors", which prevents your files from beeing accessed by others. If somebody want to open a protected file, the programms wants to have a password. How does this one work?
IS there a possibility to monitor ALL API-calls from ALL apps?!? (i don't want to use/write a debugger!)

Thanks a lot!

Zweiberg
Sep 20th, 2000, 05:04 AM
You can use these Win32 API functions:

FindFirstChangeNotification
FindNextChangeNotification

wolfrog
Sep 20th, 2000, 07:52 AM
OK, that's for files (dirs)! But I need something to monitor API Calls... Assembler stuff is very welcome!