File monitoring method and device, electronic equipment and storage medium

The invention discloses a file monitoring method and device, electronic equipment and a storage medium. The method comprises the following steps: determining a kernel extension type ceclay packet filter program; wherein the kernel extension type ceclay packet filter program is generated by loading t...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
1. Verfasser: ZHANG DAOLONG
Format: Patent
Sprache:chi ; eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:The invention discloses a file monitoring method and device, electronic equipment and a storage medium. The method comprises the following steps: determining a kernel extension type ceclay packet filter program; wherein the kernel extension type ceclay packet filter program is generated by loading the target extension type ceclay packet filter program into a system kernel; monitoring the operation information in the target monitoring file according to the kernel extension type ceclay packet filter program; wherein the operation information at least comprises a file reading operation, a file changing operation, a file renaming operation and a file deleting operation; if operation information of the target monitoring file is obtained through monitoring of the kernel extension type ceclay packet filter program, the operation information is stored in a memory space; wherein the kernel is a system kernel of a system running the target monitoring file; the memory space is the memory space of a system for operating