winapi - Windows Filesystem Minifilter Drivers: can I monitor and prevent FS operations using them? -

I need it: 1. Monitor operation on some drive / path. 2. Read and / or stop writing actions on some drives / paths - For example:

  c: // user d:  

what This Windows can be used by filesystem minfilter drivers ?

I am mostly interested in Phase 2. In other words, can an INP cancel?

Yes, this is possible with a file system mini filter driver.

For # 1 you do not need a mini filter driver which you can use as Win32 API.

You can not do this for # 2, but whatever you are

you can do it.