CBFS Filter

A filter driver library that allows you to track and control filesystem, registry, and process manager operations.

Download
The Latest CBFS Filter Is Now Available!

Highlights include more flexible filter rules, new events for reparse point operations, and a host of core performance and usability improvements [learn more]
CBFS Filter

Monitor and Control System Operations

CBFS Filter allows you to intercept and react to filesystem, registry, and process manager operations as they occur. Advanced filter rules ensure that your application only gets notified of the operations that you actually care about, and intelligent access rules enable you to enforce access restrictions with no additional effort. Without writing a single line of driver code, you'll be able to modify data, encrypt files on-the-fly, control access, and block requests entirely.

Our product comparison page provides a detailed side-by-side comparison of each of our products. Compare CBFS Filter to our other products and determine which is the best fit for your needs.

CBFS Filter

Powerful Features for Maximum Performance


Proactively Intercept and React to Requests

CBFS Filter's robust, rules-based filtering engine is flexible enough to handle use-cases of any scale and complexity. Target the requests you care about with surgical precision, then react to them as they occur.

Log System Activity for Auditing Purposes

Get a complete picture of who or what is accessing your information. CBFS Filter's comprehensive monitoring capabilities let you keep a detailed record of everything that happens on your system.

Secure Files and Enforce Access Restrictions

Implement on-the-fly file encryption, using algorithms of your choice, for deeply-integrated data security. Leverage intelligent access rules to enforce targeted access restrictions via a modern minifilter driver.

Manage and Protect Registry Keys

Full control over registry key creation, modification, enumeration, and deletion allows you to protect registry keys and their values. You can even redirect requests to other registry keys.

More Reliable than FileSystemWatcher

Never miss a filesystem operation again thanks to CBFS Filter's low-level integration. A dedicated filesystem monitoring component provides everything you need.

Implement Continuous Data Protection (CDP)

Continuously record all filesystem changes, and back up content revisions in real time as each modification occurs. Encrypt the backups before storing them for added peace of mind.

Simple Deployment

The simplified deployment scheme eliminates architecture detection and potential errors. A single CAB file contains all of the drivers and Helper DLLs that are necessary for driver installation.

Flexible Filter Options

Support for the recommended Minifilter mode as well as Legacy mode. Set multiple instances at different altitudes, allowing you to intercept requests before or after other filters.

Create Virtual Files, Directories, and Registry Keys

Create virtual files, directories, and registry keys populated with application-defined data. Windows will recognize them as real, so third-party applications can interact with them in the usual manner.

Monitor Process and Thread Activity

Keep an eye on applications' process and thread activity. Limit access rights to prevent undesired creation, suspension, and termination; and to guard against potentially unwanted programs (PUPs).

Supported Platforms

.NET

Managed .NET Components

Managed .NET components based on the same high-performance codebase as our native editions. The edition of choice for managed .NET applications.

.NET
  • Managed .NET components built atop our high-performance shared codebase.
  • Extensive demo applications written in C#.
  • Comprehensive integrated product documentation.
  • Seamless integration with Visual Studio.
  • Support for .NET Framework 2.0 - 4.8.
  • Supports Windows 7 / Server 2012 and later.
  • .NET Standard 2.0 and 2.1 support.
  • Support for .NET 6, .NET 5, .NET Core 3.1, and earlier.


C++

High-Performance C++ Classes

High-performance C++ classes packaged in 32-bit & 64-bit Windows DLLs. The edition of choice for C++ development.

C++
  • C++ classes built atop our high-performance shared codebase.
  • Extensive C++ demo applications.
  • Comprehensive HTML product documentation.
  • Seamless integration with popular development environments, including Visual Studio.
  • Supports Windows 7 / Server 2012 and later.


Delphi

Native Delphi Components

Native Delphi components with no external dependencies, based on the same high-performance codebase as our other editions. The natural choice for Delphi programming.

Delphi
  • Delphi VCL components built atop our high-performance shared codebase.
  • Extensive Delphi demo applications.
  • Comprehensive integrated product documentation.
  • Support for all Delphi versions between Delphi 6 and RAD Studio 12.
  • Supports Windows 7 / Server 2012 and later.


Java

Powerful Java Classes

Powerful Java Classes, based on the same high-performance codebase as our native editions. The edition of choice for Java development.

Java
  • Java Classes built atop our high-performance shared codebase.
  • Extensive demo applications written in Java.
  • Includes comprehensive JavaDocs.
  • Seamless integration with popular development environments, including IntelliJ and Eclipse.
  • Supports Java 1.7+.
  • Supports Windows 7 / Server 2012 and later.


Python

Python Modules

Python modules for Windows; featuring the same trustworthy components that come with other editions, available for use in Python 3.

Python
  • Python modules for Windows.
  • Support for Python 3.
  • Extensive console demo applications.
  • Easy installation using PIP.
  • Demo applications and comprehensive HTML documentation.


Qt

Qt Class Libraries

High-performance Qt classes packaged in 32-bit & 64-bit Windows DLLs. The edition of choice for Qt development.

Qt
  • 32-bit & 64-bit C++ class libraries (Windows DLLs).
  • Support for Qt 4.8 and Qt 5.
  • Qt GUI demo applications and comprehensive HTML documentation
  • Seamless integration with Qt Creator.
  • Supports Windows 7 / Server 2012 and later.


Go

Go Packages

High-performance Go packages based on the same C++ codebase as our other editions. The edition of choice for Go development.

Go
  • High-performance, C++-based Go modules.
  • 32-bit & 64-bit C++ class libraries (Windows DLLs).
  • Supports Go 1.13 and later.
  • Comprehensive HTML product documentation.
  • Supports Windows 7 / Server 2012 and later.


Components

The following components are included in CBFS Filter.

Included Samples

The following samples are installed with the product. Please download the trial to get started.

Add Header
Encrypts and decrypts files on the fly using an XOR algorithm, adding a custom header along the way.
Platforms: Delphi, Java, .NET Framework, C++, Visual C++
Directory Hide
Hides a specified directory.
Platforms: Delphi, Go, Java, .NET Framework, Python, Qt, C++, Visual C++
Encrypt Files
Encrypts and decrypts files with simple on-the-fly encryption.
Platforms: Delphi, Java, .NET Framework, Qt, Visual C++
File Monitor
Monitors and logs filesystem activity.
Platforms: C++ Builder, Delphi, Java, .NET Core, .NET Framework, Node.js, Python, Qt, C++, Visual C++
Filesystem Filter
A 'no-op' filesystem filter application that you can add your code to.
Platforms: Delphi, Java, .NET Framework, Visual C++
FileSystemWatcher
Emulates the .NET FileSystemWatcher class, but more reliably.
Platforms: .NET Framework
Placeholder
Illustrates how to replace the placholder file with actual data.
Platforms: .NET Framework, C++
Process Monitor
A basic process monitoring application.
Platforms: Delphi, Java, .NET Core, .NET Framework, Node.js, Python, Qt, C++, Visual C++
Registry Monitor
A basic registry monitoring application.
Platforms: Delphi, Java, .NET Core, .NET Framework, Node.js, Python, Qt, C++, Visual C++

Download Trial


30-Day Fully-Functional Trial

Get started today and see why developers worldwide
choose Callback Technologies components.

Order Online


CBFS Filter

A filter driver library that allows you to track and control filesystem, registry, and process manager operations.