¡@

Home 

c++ Programming Glossary: fsctl_enum_usn_data

How can I detect only deleted, changed, and created files on a volume?

http://stackoverflow.com/questions/7421440/how-can-i-detect-only-deleted-changed-and-created-files-on-a-volume

You can enumerate all the files on a volume using FSCTL_ENUM_USN_DATA. This is a fast process my tests returned better than 6000 records.. up. Windows does appear to cache the data returned by FSCTL_ENUM_USN_DATA. This program searches the C volume for files named test.txt.. 0 mft_enum_data.HighUsn maxusn if DeviceIoControl drive FSCTL_ENUM_USN_DATA mft_enum_data sizeof mft_enum_data buffer BUFFER_SIZE bytecount..