Filespy.exe - Windows 2003 Resource Kit Utility

This tool allows you to monitor both local and network drives to see what types of I/O Request Packets (IRP) and Fast I/O operations are executing in the system. It is a general-purpose diagnosis tool for anyone who wants to understand the file activity in a system. FileSpy aids Installable File System (IFS) filter driver writers in understanding the I/O that is occurring in the system. FileSpy was developed as a useful example of how to write an IFS filter driver. This driver sits in the I/O stack and records the relevant information for the I/O operations that are happening, such as the starting time, the completion time, and return status.