Process access information

Sysinfo

Hi All

I am looking for a tool and/or know-how to identify which process has been configured to access certain files in my file-system (if this is even possible ? )

I know about configuring auditing but what I am trying to find is if any process used the files in the past or will need the files in the future even though they are not accessing them now.

Any suggestions are welcome.

Sysinfo

PseudoKnight

As far as I know there is no guaranteed or consistent way to find out which program uses which files without the program being activated and in the process of using the file. However, there may be a way to LOG which program uses which files, so that you may look it up after they have already done so.

Program configuration files and the system registry is your best bet in finding out which files are accessed per app, but like I said, this isn't guaranteed or consistent for all apps.