Access SMB Files for C # Log

Question

I am trying to make a simple log of files transferred via SMB.

This works with Windows 8 or higher:

var scope = new ManagementScope(@"\\.\root\Microsoft\Windows\SMB"); var query = new WqlEventQuery( @"SELECT * FROM __InstanceOperationEvent WITHIN 1 WHERE TargetInstance ISA 'MSFT_SmbOpenFile'" ); ManagementEventWatcher watcher = new ManagementEventWatcher(scope, query); watcher.EventArrived += new EventArrivedEventHandler(HandleEvent); watcher.Start(); .... 

But it does not work for windows 7 or lower. (Runtime Requirements)

Is there a similar solution compatible with at least Windows 7?

1º Change

This Windows 7 module seems to perform this task:

Computer management (I see this information on windows 7)

2º Edit

To clarify the purpose. I am creating a DLP (data loss prevention) application . I need to track and register the files that can be accessed through shared access to Windows (user, file name), and ultimately block this access when the user asks for the file.

Answer 1

Admittedly, this is a partial answer. This may be useful, although it does not fit into the commentary.

It seems you could try with Win32_ConnectionShare and Win32_ServerConnection . It is used here , for example.

However, I'm not sure if you can use it to capture an event. Combining all your requirements is complicated (why are you setting a reward!)

Additional Information:

https://www.codeproject.com/Articles/17803/A-PC-Audit-Application-in-C

Detecting a file read in C #

Is it possible to program the Windows share folder access log (SMB share) using the .Net framework?

https://msdn.microsoft.com/en-us/library/system.io.filesystemwatcher(v=vs.110).aspx

SACL for services using C # || get a handle to a service that has ACCESS_SYSTEM_SECURITY permissions using C #

https://www.netfort.com/blog/auditing-file-access-on-file-servers/

https://blogs.technet.microsoft.com/mspfe/2013/08/26/auditing-file-access-on-file-servers/

https://superuser.com/questions/783950/how-to-display-currently-connected-users-workstations-to-a-windows-smb-share

fooobar.com/questions/141048 / ...

https://msdn.microsoft.com/en-us/library/windows/desktop/aa365433(v=vs.85).aspx

https://msdn.microsoft.com/en-us/library/bb726966.aspx