.net - Intercept FIleSytemCall for Deletion

Question

Is there a way to detect deletion of a file before windows performs the deletion? I found FileSystemWatcher class but the event is raised only after the delete action is performed but I want to trap the delete action once the user/process chooses to delete it. You can monitor the file system table but looking for a better approach. Thanks for your help.

Answer 1

You need a filesystem filter driver. However I strongly suggest that if you don't know the answer you probably shouldn't be doing it.

http://msdn.microsoft.com/en-us/library/windows/hardware/gg462968.aspx