CBFS Filter

A filter driver library that allows you to track and control filesystem, registry, and process manager operations.

Download

CBFS Filter 2024 is Now Shipping

This release includes support for File Isolation, Virtual Files, and an improved development experience [learn more].

Monitor and Control System Operations

CBFS Filter allows you to intercept and react to filesystem, registry, and process manager operations as they occur. Advanced filter rules ensure your application is only notified of the operations you care about, and intelligent access rules enable you to enforce access restrictions with no additional effort. Present different file contents to different processes and maintain entirely virtual files. Without writing a single line of driver code, you'll be able to modify data, encrypt files on-the-fly, control access, and block requests entirely.

Our product comparison page provides a detailed, side-by-side comparison of each of our products. Compare CBFS Filter to our other products and determine which product best fits your requirements.

Online Resources

Create Virtual Files
Windows Registry Control
Monitor Process and Thread Operations
Virtual Registry Keys
Virtual Files
FileSystemWatcher
Registry Monitor
Directory Hider
File Monitor
Minifilter
Monitor Filesystem Operations

Comprehensive Features for Maximum Performance

Proactively Intercept and React to Requests

CBFS Filter's robust, rules-based filtering engine is flexible enough to handle use-cases of any scale and complexity. Target the requests you care about with surgical precision, then react to them as they occur.

Log System Activity for Auditing Purposes

Get a complete picture of who or what is accessing your information. CBFS Filter's comprehensive monitoring capabilities let you keep a detailed record of everything that happens on your system.

Secure Files and Enforce Access Restrictions

Implement on-the-fly file encryption, using algorithms of your choice, for deeply-integrated data security. Leverage intelligent access rules to enforce targeted access restrictions via a modern minifilter driver.

File Isolation

File isolation allows different processes to see different file contents when viewing the same file. For example, one process may see decrypted content, while another process would see only encrypted data.

More Reliable than FileSystemWatcher

Never miss a filesystem operation again thanks to CBFS Filter's low-level integration. A dedicated filesystem monitoring component provides everything you need.

Implement Continuous Data Protection (CDP)

Continuously record all filesystem changes, and back up content revisions in real time as each modification occurs. Encrypt the backups before storing them for added peace of mind.

Simple Deployment

The simplified deployment scheme eliminates architecture detection and potential errors. A single CAB file contains all of the drivers and Helper DLLs that are necessary for driver installation.

Flexible Filter Options

Set multiple instances at different altitudes, allowing you to intercept requests before or after other filters.

Create Virtual Files and Registry Keys

Create virtual files and registry keys populated with application-defined data. Windows will recognize them as real, so third-party applications can interact with them in the usual manner.

Monitor Process and Thread Activity

Keep an eye on applications' process and thread activity. Limit access rights to prevent undesired creation, suspension, and termination; and to guard against potentially unwanted programs (PUPs).

Manage and Protect Registry Keys

Full control over registry key creation, modification, enumeration, and deletion allows you to protect registry keys and their values. You can even redirect requests to other registry keys.

Supported Platforms

.NET

Managed .NET Components

A .NET component layer managing a robust Windows-only driver.

Support for .NET 8, .NET 7, .NET 6, .NET 5, .NET Core 3.1, and earlier.
Seamless integration with Visual Studio.
Extensive sample applications written in C#.
Comprehensive integrated product documentation.

Download Documentation

C++

High-Performance C++ Classes

High-performance C++ classes packaged in 32-bit & 64-bit Windows DLLs. The edition of choice for C++ development.

C++ classes built atop our high-performance shared codebase.
Extensive C++ sample applications.
Comprehensive HTML product documentation.
Seamless integration with popular development environments, including Visual Studio.
Precompiled binaries for x86/x64 and ARM.

Download Documentation

Delphi

Native Delphi Components

Native Delphi components wrapping a Windows-only driver, based on the same high-performance codebase as our other editions. The natural choice for Delphi programming.

Delphi VCL components built atop our high-performance shared codebase.
Extensive Delphi sample applications.
Comprehensive integrated product documentation.
Support for all Delphi versions between Delphi 6 and RAD Studio 12.

Download Documentation

Java

Powerful Java Classes

Powerful Java Classes managing a robust Windows-only driver.

Java Classes built atop our high-performance shared codebase.
Extensive sample applications written in Java.
Includes comprehensive JavaDocs.
Seamless integration with popular development environments, including IntelliJ and Eclipse.
Support for JDK version 1.7 and up.

Download Documentation