Skip to content

Commit d05547d

Browse files
authored
Create README.md
1 parent c2ae50b commit d05547d

File tree

1 file changed

+29
-0
lines changed

1 file changed

+29
-0
lines changed

README.md

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
# Windows File Read Events
2+
3+
A Windows CLI utility to watch the file system for file *read* events.
4+
5+
It writes to the console the file path along with the offset and IO size in bytes.
6+
7+
## Usage
8+
9+
To watch a specific file:
10+
11+
WinFileReadEvents.exe C:\test\target.txt
12+
13+
Or without any argument to watch system-wide:
14+
15+
WinFileReadEvents.exe
16+
17+
Press `ctrl+c` to stop watching.
18+
19+
## Output format
20+
21+
Outputs to the stdout any file read event including the file path, along with the offset and read size in the following format:
22+
23+
>|<offset>|<io_size>|<file_path>
24+
25+
In case of an error, a line will be written to the stdout in the following format:
26+
27+
x|<error_message>
28+
29+
This utility uses Event Tracing for Windows (ETW) via [`Microsoft.Diagnostics.Tracing.TraceEvent`](https://www.nuget.org/packages/Microsoft.Diagnostics.Tracing.TraceEvent/) package.

0 commit comments

Comments
 (0)