EaseFilter File System Filter Driver SDK Demo

The EaseFilter file protector can protect your files being accessed by unauthorized user. With the EaseFilter file protector you can control the file activities on file system level, capture file open, create, overwrite, read, write, query file information, set file information, query security information, set security information, file rename, file delete, directory browsing and file close I/O requests.

EaseFilter file protector provides a comprehensive solution for transparent file level encryption. It allows the file to be encrypted or decrypted transparently on-the-fly, every file will be encrypted with the unique encryption iv key, it can allow only authorized users or processes can access the encrypted files.

---

Closed Caption:

Run File Protector as administrator to Demo how to use EaseFilter File System Filter Driver SDK
Configure the filter driver setting before start the filter
Add filter rules to manage the files which you want to monitor.
You can select the file access control flags or by click the check box for faster selection.
To enable encryption, make sure input the password phrase, which will generate a 256 bit encryption key.
Here you can see that the file rename, file delete and file access from remote network was blocked.
Now you add one filter rule, you also can add more filter rules to meet your filter requirement.
You can choose the I/O requests which you want to monitor, then you will get the callback from filter driver when the managed file's I/O occurs.
After you registered the I/O, you also can choose only display the I/O which has the file changed.
Now you can start the protector service.

Now the service started, we will test to copy some files to the protected folder.
This is the protected folder, all the files except the files with extension *.dll, *.exe will be protected in this folder.

the new created files will be encrypted transparently on-the-fly by the filter driver with unique new IV key.
from this console you can see the I/O event, it only display the file changed events.
The file rename and delete I/O were blocked, so rename and file delete will be denied.

Now we stop the protector service to test our encryption files.
Now let's open the encrypted file, since the protector service was stopped, the encrypted files can't be accessed.
Now we start the protector service again, the encrypted file can be opened without any problem.
Thanks for your watching, you can download the source code example project in www.easefilter.com