MonDisk 是一个Windows平台下的文件系统过滤驱动程序，该驱动模块清晰，功能简单，特点是完全使用NT式的Dispatch 函数实现文件访问行为的监控-MonDisk is a file system filter driver on Windows platform,the function of this model is simple but with a characteric that,All its dispatch routine are all NT dispatch r

文件过滤驱动 寒江独钓里面的例子 亲测好使-File system filter driver