| 1 | 2:28:44.1239687 PM NOTEPAD.EXE 3436 CreateFile \\vboxsvr\timeless-public\ SUCCESS Desired Access: Read Data/List Directory, Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
|
|---|
| 2 | 2:28:44.1243961 PM NOTEPAD.EXE 3436 FileSystemControl \\vboxsvr\timeless-public\ INVALID DEVICE REQUEST Control: FSCTL_LMR_QUERY_DEBUG_INFO
|
|---|
| 3 | 2:28:44.1244361 PM NOTEPAD.EXE 3436 QueryDirectory \\vboxsvr\timeless-public\note.txt NO MORE FILES Filter: note.txt
|
|---|
| 4 | 2:28:44.1256312 PM NOTEPAD.EXE 3436 CloseFile \\vboxsvr\timeless-public\ SUCCESS
|
|---|
| 5 |
|
|---|
| 6 | 2:31:08.0056698 PM NOTEPAD.EXE 3436 CreateFile C:\Users\timeless\Documents SUCCESS Desired Access: Read Data/List Directory, Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a, OpenResult: Opened
|
|---|
| 7 | 2:31:08.0057134 PM NOTEPAD.EXE 3436 FileSystemControl C:\Users\timeless\Documents INVALID DEVICE REQUEST Control: FSCTL_LMR_QUERY_DEBUG_INFO
|
|---|
| 8 | 2:31:08.0057393 PM NOTEPAD.EXE 3436 QueryDirectory C:\Users\timeless\Documents\note.txt NO SUCH FILE Filter: note.txt
|
|---|
| 9 | 2:31:08.0057717 PM NOTEPAD.EXE 3436 CloseFile C:\Users\timeless\Documents SUCCESS
|
|---|
