I would like to monitor (CIFS) if a file ".LOCKY" will be created. So far I've only created a fpolicy to prohibit the creation of ".LOCKY" files. But how could I monitor if one of thoses files will be created?
The file create operation should be added to the monitored operations list for the FPolicy server to receive a notification from the storage system. The file create operation can be monitored using the CLI or ONTAPI. It can also be set by the FPolicy server using a bitmask.