DirEvents

DirEvents is a small console utility designed to help you keep a close look on the modifications that happen with the directories on your system. The tool can come in handy for situations when you have a sensitive folder or suspect malicious activity and you want to keep track of the changes made in that specific folder.

Before you run the program, it is recommended that you are logged in with an account with Administrative account as otherwise there is a good chance that you cannot access certain directories. When you launch the program, you get a detailed explanation about what the output contains, namely that the first line includes the time of the event that is cached. You can find out more about the trigger of the event from the second and third column.

As you probably guessed, the fourth and fifth column contains information about the action related to the event. Speaking of the events, the program displays the following types of actions, added, removed, modified or name changes of the files. You can find out more about the path to the file that was modified from the sixth column.

It is worth mentioning that the developer provides a Batch and PowerShell scripts that have the role of showing how to process the output of the tool. You can check them out in the Examples.

While it is true that in general, you may be fully aware of certain operations occurring on your PC – such as antivirus scans, video encoding or downloading – let's not forget that there are also numerous actions that you do not expect, want or even know are happening. DirEvents is a tool designed to help you monitor all changes being made in the folders and subfolders on your system.