Apparatus and method for obtaining a log of information written on a recording medium and program therefor

An apparatus for obtaining a write log when a file in a computer is written to a recording medium, includes an event detecting means for detecting an event of a file access, a reading means for reading file information by detecting that the file access is a read access to the file in the time from an open access to a close access when the event detecting means detects an event and a log obtaining means for outputting the file information read by the reading means to a memory area as a log when the file access is determined as a close access when the event detecting means detects an event. The apparatus for obtaining a write log prevents information in the computer from being written freely and directly to an external recording medium, not via an OS but via an original driver such as writing software, whereby information leakage can be managed.