File Audit With File System Filter Driver

Download EaseFilter File Monitor Filter Driver SDK Setup File
Download EaseFilter File Monitor Filter Driver SDK Zip File
Understand EaseFilter Filter Driver SDK Programming

What is FileAudit

FileAudit monitors, archives, alerts and reports on access (or access attempts) to sensitive files and folders stored on Microsoft Windows systems.

FileAudit is an agentless software solution that instantly gives a comprehensive list of:

read/write accesses
file ownership changes (accepted or denied)
permission modifications (accepted or denied)

Each record details the user, the domain and the date and time of connection and disconnection for a file, a selection of files, a folder and subfolder, a selection of folders and subfolders. You can be alerted in real time when a specific access event occurs.

Monitor File Access in Real-Time
FileAudit provides comprehensive, sortable and real-time information across your organization and significantly reduces the workload involved when having to monitor file access. It constantly examines and records read/write/delete accesses (or access attempts), file ownership changes and permission modifications, so IT or management can immediately address any inappropriate accesses.

Alerts to potential security breaches
Real-time alerts to predetermined events such as a file deletion, a denied access or monitoring a suspicious user, automatically triggers an email to selected recipients, enabling a quick reaction when necessary.

Colleagues across your organization can also receive on email, customized reports according to their specific criteria.

In fact is so easy and intuitive, even non-IT executives (and external auditors) can use FileAudit securely and autonomously, without breaching security protocols.

The Filter Driver SDK Program
With file system filter driver monitor SDK, building the file audit software is simple as a few steps, all you need to do register the managed files or folders, and register the I/O events ( file openings, creations, rename, deletion), you will get the I/O event when the I/O happens in the managed files or folders.

The callback events include the user name, process name, file name, I/O type, file information.