Intercept disk activity on the level of physical blocks

I suppose this should be possible via filter driver, but开发者_如何转开发 what type exactly I need?

I was under impression that this was the domain of the disk firmware. So you would have to work there.

You need a class upper filter for volumes (Class=Volume, ClassGuid={71A27CDD-812A-11D0-BEC7-08002BE2092F}) or disk drives (Class=DiskDrive, ClassGuid={4D36E967-E325-11CE-BFC1-08002BE10318}). Depending on at what level do you want to monitor physical blocks.