Can a file copy be detected on windows?

Multi tool use
Multi tool use











up vote
-1
down vote

favorite












I want to trigger a piece of code to run as soon as a 'copy' command is executed on Windows. Let's say I want to perform some operations as soon as the user tries to copy a file. Is there any way to detect the 'copy' operation on Windows?






windows operating-system copy







share|improve this question






















  • Copying is not an atomic operation that can be identified and monitored at the file-system level. It's simply reading the file data and some or all metadata.
    – eryksun
    2 days ago










  • Yes, this is possible. That's what anti-malware software does. What is your question?
    – IInspectable
    2 days ago















up vote
-1
down vote

favorite












I want to trigger a piece of code to run as soon as a 'copy' command is executed on Windows. Let's say I want to perform some operations as soon as the user tries to copy a file. Is there any way to detect the 'copy' operation on Windows?






windows operating-system copy







share|improve this question






















  • Copying is not an atomic operation that can be identified and monitored at the file-system level. It's simply reading the file data and some or all metadata.
    – eryksun
    2 days ago










  • Yes, this is possible. That's what anti-malware software does. What is your question?
    – IInspectable
    2 days ago













up vote
-1
down vote

favorite









up vote
-1
down vote

favorite











I want to trigger a piece of code to run as soon as a 'copy' command is executed on Windows. Let's say I want to perform some operations as soon as the user tries to copy a file. Is there any way to detect the 'copy' operation on Windows?






windows operating-system copy







share|improve this question













I want to trigger a piece of code to run as soon as a 'copy' command is executed on Windows. Let's say I want to perform some operations as soon as the user tries to copy a file. Is there any way to detect the 'copy' operation on Windows?






windows operating-system copy




windows operating-system copy






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked 2 days ago









V.I.L

43




43












  • Copying is not an atomic operation that can be identified and monitored at the file-system level. It's simply reading the file data and some or all metadata.
    – eryksun
    2 days ago










  • Yes, this is possible. That's what anti-malware software does. What is your question?
    – IInspectable
    2 days ago


















  • Copying is not an atomic operation that can be identified and monitored at the file-system level. It's simply reading the file data and some or all metadata.
    – eryksun
    2 days ago










  • Yes, this is possible. That's what anti-malware software does. What is your question?
    – IInspectable
    2 days ago
















Copying is not an atomic operation that can be identified and monitored at the file-system level. It's simply reading the file data and some or all metadata.
– eryksun
2 days ago




Copying is not an atomic operation that can be identified and monitored at the file-system level. It's simply reading the file data and some or all metadata.
– eryksun
2 days ago












Yes, this is possible. That's what anti-malware software does. What is your question?
– IInspectable
2 days ago




Yes, this is possible. That's what anti-malware software does. What is your question?
– IInspectable
2 days ago












1 Answer
1






active

oldest

votes

















up vote
0
down vote













You may monitor the clipboard (see Creating a Clipboard Format Listener) and check if there is an object with format CF_HDROP in it. But it will not tell you when the clipboard paste operation actually started.



This also will not cover copying which does not involve clipboard, like direct file_read/file_write loop in a File Manager application. For this you may monitor changes in the file system (see How can I monitor a Windows directory for changes?) but it will not tell you where was the file copied from, just where was it pasted to.






share|improve this answer





















    Your Answer






    StackExchange.ifUsing("editor", function () {
    StackExchange.using("externalEditor", function () {
    StackExchange.using("snippets", function () {
    StackExchange.snippets.init();
    });
    });
    }, "code-snippets");

    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "1"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














     

    draft saved


    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53203843%2fcan-a-file-copy-be-detected-on-windows%23new-answer', 'question_page');
    }
    );

    Post as a guest


















    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes








    up vote
    0
    down vote













    You may monitor the clipboard (see Creating a Clipboard Format Listener) and check if there is an object with format CF_HDROP in it. But it will not tell you when the clipboard paste operation actually started.



    This also will not cover copying which does not involve clipboard, like direct file_read/file_write loop in a File Manager application. For this you may monitor changes in the file system (see How can I monitor a Windows directory for changes?) but it will not tell you where was the file copied from, just where was it pasted to.






    share|improve this answer

























      up vote
      0
      down vote













      You may monitor the clipboard (see Creating a Clipboard Format Listener) and check if there is an object with format CF_HDROP in it. But it will not tell you when the clipboard paste operation actually started.



      This also will not cover copying which does not involve clipboard, like direct file_read/file_write loop in a File Manager application. For this you may monitor changes in the file system (see How can I monitor a Windows directory for changes?) but it will not tell you where was the file copied from, just where was it pasted to.






      share|improve this answer























        up vote
        0
        down vote










        up vote
        0
        down vote









        You may monitor the clipboard (see Creating a Clipboard Format Listener) and check if there is an object with format CF_HDROP in it. But it will not tell you when the clipboard paste operation actually started.



        This also will not cover copying which does not involve clipboard, like direct file_read/file_write loop in a File Manager application. For this you may monitor changes in the file system (see How can I monitor a Windows directory for changes?) but it will not tell you where was the file copied from, just where was it pasted to.






        share|improve this answer












        You may monitor the clipboard (see Creating a Clipboard Format Listener) and check if there is an object with format CF_HDROP in it. But it will not tell you when the clipboard paste operation actually started.



        This also will not cover copying which does not involve clipboard, like direct file_read/file_write loop in a File Manager application. For this you may monitor changes in the file system (see How can I monitor a Windows directory for changes?) but it will not tell you where was the file copied from, just where was it pasted to.







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered 2 days ago









        xmojmr

        7,00842239




        7,00842239






























             

            draft saved


            draft discarded



















































             


            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53203843%2fcan-a-file-copy-be-detected-on-windows%23new-answer', 'question_page');
            }
            );

            Post as a guest






































































            UYX l BNC np Vk4yZ mdMyj 1BpOnOAWUsuXRsQMtLrmeo3332GTCav8E4r6l7,jN4jM0wXqB,2G0FdRXqArZp
            -
            o44tZN,qql JjX8g

            Popular posts from this blog

            Schultheiß

            Image
            Der Titel dieses Artikels ist mehrdeutig. Weitere Bedeutungen sind unter Schultheiß (Begriffsklärung) aufgeführt. Ein Schultheiß. Holzschnitt von Peter Flötner (16. Jahrhundert) Der Schultheiß oder Schuldheiß (von althochdeutsch  sculdheizo ‚Leistung Befehlender‘, vgl. mittelniederdeutsch  schult(h)ēte , latinisiert (mittellat.) sculte(t)us , schwäbisch heute noch Schultes für „Bürgermeister“) bezeichnet einen in vielen westgermanischen Rechtsordnungen vorgesehenen Beamten, der Schuld heischt : Er hatte im Auftrag seines Herren (Landesherrn, Stadtherrn, Grundherrn) die Mitglieder einer Gemeinde zur Leistung ihrer Schuldigkeit anzuhalten, also Abgaben einzuziehen oder für das Beachten anderer Verpflichtungen Sorge zu tragen. Sprachliche Varianten des Schultheißen sind Schulte , Schultes oder Schulze . Früher wurde zwischen dem Stadtschulzen und dem Dorfschulzen unterschieden. In der städtischen Gerichts- und Gemeindeverfassung war er ein vom städtischen Rat oder vom L...
            Read more

            how to define a CAPL function taking a sysvar argument

            Image
            up vote 0 down vote favorite In Vector CANoe, is it possible to define a function that takes a system variable argument like the system function TestWaitForSignalMatch() ? For my use case it is not sufficient to supply the current value of the system variable because I want to pass the system variable to TestWaitForSignalMatch() or similar system functions. The CANoe help seems to show examples: long TestWaitForSignalMatch (Signal aSignal, float aCompareValue, dword aTimeout); // form 1 long TestWaitForSignalMatch (sysvar aSysVar, float aCompareValue, dword aTimeout); // form 3 I tried like this void foo(sysvar aSysvar) {} ^ or this void foo(sysvar *aSysvar) {} ^ but I get a parse error at the marked position of the sysvar keyword in both cases. I successfully created functions that take a...
            Read more

            Krone von Aragonien

            Image
            Wappenschild der Krone von Aragonien Die Länder der Krone Aragon (hellblaue Gebiete: nur kurzzeitig oder indirekt unter aragonesischer Herrschaft) Herrschaftsgebiet zur Zeit Ramon Berenguers IV. Krone von Aragonien im 13. Jahrhundert Krone von Aragonien im 15. Jahrhundert Unter dem Begriff Krone von Aragonien ( spanisch Corona de Aragón , aragonesisch Corona d’Aragón , katalanisch Corona d’Aragó ) werden Herrschaftsgebiete unterschiedlicher Verfasstheit zusammengefasst, die zwischen 1137 und 1516 bzw. 1714 in Personalunion von den Königen von Aragonien regiert wurden. Dazu gehörten Königreiche wie Aragonien, Mallorca, Valencia, Sizilien, Sardinien, Korsika und Neapel, das Herzogtum Athen und Neopatria, die Markgrafschaft Provence, die Grafschaften Barcelona, Roussillon und Cerdanya und die Herrschaft Montpellier. [1] Die Herrscher der Krone von Aragonien und von Spanien zählten und zählen in ihrer Titulatur eine große Anzahl von Herrschaftsgebieten auf. Dies...
            Read more