The monitoring and auditing method of Windows File manipulations

To completely monitor file manipulations and fully record the audit logs on the Windows operating system, this paper elaborate a policy based approach to monitoring and auditing file manipulating activities, analyze the workflow of the monitoring and auditing process, and proposed some critical technologies on the implementation, which enables monitoring and recording all types of file manipulating activities on the application level, resulting in complete audit log record. Additionally, the technologies we propose are easy to implement.