Is it possible to use the FileSyst开发者_运维技巧emWatcher to find the PID or process name that is changing a file?
Nope, you need a file system filter driver to track changes with such details.
Negative. The only information you will have is the data contained in the FileSystemEventArgs
class, documented here.
This means you only get the type of change that was made, as well as the path to the file that was changed.
精彩评论