I try to figure out a way to get the used files of a process to show which files are currently opened / used by this process.
I have found Listing Used Files.
Is there a link to get this in C#?
The NtQuerySystemInformation function seems like a logical starting point, but you'd have to access it via P/Invoke.
From my googling it seems like many people have thought of this approach in the past, but it has never been documented (at least not on PInvoke.net).
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With