Windows file system driver copy / compliance tool C or C++

Overview: Hello all, I put out a previous post (detailed below) for a file watcher based tool to help us with some compliance type stuff but some very helpful people have responded and suggested that this needs to be a file system driver as opposed to a C# application that runs as a service. Basically this needs to be a tool that anything that is saved / edited / deleted is copied to a compliance folder called “Cache files” so that we have a copy of all the files that change within the windows file system. This will also include windows files and remote computers that are writing files by way of a file share / UNC path etc on a remote host. I don’t really know what im talking about in terms of best practise or design here so happy to take some suggestions, this will be an iterative proof of concept. [login to view URL] Requirements: -Will take every file changed in windows and dump it into a folder “cache folder” (the original file that is) -Works at file system level Kernel level driver to work on Windows platforms -Signed windows driver by Microsoft GUID (please note we are happy to help to fill in paper work / organise if this helps) -Works at file system level and will cache a copy of every file that is saved / edited / changed by windows (I.e before anything is written to disk a copy of the old file is saved in a “cache folder” -Cache folder is omitted from the processes (I.e circular loop is not created every time windows saves to the cache folder it will not try to create a copy of the cache folder files). -List of original path and “cached folder” locations of each file (so that it logs its changes and source / destination of the duplicate files, in both its correct file system location and the cached file backup location is matched) -Also in above list the .exe / service that was used to change the files (i.e if [login to view URL] was what caused [login to view URL] to be updated / saved / deleted / edited then the process which did this is logged). -As per above if the process which changed the file is not a local .exe file but a remote computer then it will log its hostname / IP address. -Just a proof of concept is required for now -It is understood that this code would be written in C / C++ but happy to take advise assuming that this is a file system level based driver that can interact with everything being saved / edited / updated in the windows file system. Original C# incorrect posting: “I am looking for a windows service proof of concept that can get in the middle of files being written in windows. Basically exactly like an Antivirus works in terms of being able to scan a file before It allows it to write to windows I need to be able to intercept files and cache them before they are written by windows (the last 10 files written I need to cache). I am building some general protection tools but need the ability to be able to cache files before they write with the following conditions: -Ideally this will be all files in the windows file system including system files (but happy to accept if we have to nominate target folders to watch). -I don’t really want any SQL Lite or SQL Server involved no way of creating a meta base of files. Just needs to cache the last 6 files windows writes before it overwrites / saves etc This doesn’t need to be fancy just a proof of concept to prove that we can do this is all that is needed at the moment.” Project and commercials: I am happy to take a fixed price to do this with hourly iterations paid separately however to start off and initiate the candidate will need to convince me they understand this requirement can develop in this space. I am no too sensitive on price but will need to be someone that knows what they are doing and not just a chancer.