Download EaseFilter File Security Filter SDK Setup File Download EaseFilter File Security Filter SDK Zip File
Have you ever felt that your shared files are vulnerable and want to keep an eye on who is accessing them, but didn’t know how? Well, our EaseFilter File Filter Driver can tell you almost everything that what’s going on in Windows with the files and folders you shared with other users within your local network. EaseFilter File Security Filter Driver SDK provides you a simple way to develop application for network file monitor and protector.
Network File Monitor and Protector
How to know if your files were accessed from a remote share?
With the EaseFilter File Monitor Filter Driver, you can intercept all the I/O requests from local computer or from the remote network share. If it was accessed from remote share, you will know the user name and remote IP address. To achieve this information, you can register the I/O callback function with API “RegisterFileChangedEventsToFilterRule”, “RegisterMonitorIOToFilterRule” or “RegisterControlIOToFilterRule”, in the callback function data structure “messageSend”, if the flag “FO_REMOTE_ORIGIN” is enabled in the CreateOptions, it meant the file was accessed from the remote share, and you can check the IP from the “RemoteIP”.
Block the file access from the network share
With the EaseFilter File Control Filter Driver, you can setup the filter rule with the access rights by disabling the flag “ALLOW_FILE_ACCESS_FROM_NETWORK”, then all the files in the filter rule can’t be accessed from the network share, you can see our demo in FileProtector as below.
You also can register the I/O “PRE_CREATE”, in the callback function you can decide if the file can be opened or not based the user name and file name when the file was accessed from the network share.
Monitor and control the file access to the network share
With the EaseFilter File Filter Driver, you can setup the filter rule to monitor and control the file access to the network share, you need to setup the file filter mask with this format “*\192.168.0.188(your ip)\sharefolder\*”, when you open the files to the remote share folder \\192.168.0.188\share, you will get the notification as below image.
You also can block the access to the remote share by setting the access rights of the filter rule. With our FileProtector demo, you can block the file deletion, file rename, file written, file creation and all other I/Os as below:
