Native Windows C++ Engine

FileGuard Directory Monitor

High-performance Win32 API file system auditing. Tracks directory operations in real time and syncs integrity telemetry to the cloud backend.

Core Capabilities

Kernel-Level API Hooking

Built with native C++ leveraging Win32 ReadDirectoryChangesW to catch file creation, deletion, renaming, and metadata updates instantly.

Zero External Dependencies

Compiled directly for target x64 Windows systems. Runs lightweight without requiring runtime environments or interpreters.

Secure Cloud Telemetry

Automatically packages detected file system anomalies and posts encrypted event payloads directly to your centralized cloud instance.

Deployment & Setup Guide

1
Obtain Cloud Server Credentials

Before starting the local monitoring executable, you must have an active server user account and API access token.

  • Navigate to the Cloud Server Portal.
  • Log in and copy your Target API Key and Cloud Endpoint URL from your profile settings.
2
Download Executable to Target PC

Download the lightweight binary directly onto the target Windows computer you intend to monitor.

Get Windows Client
3
Execute & Attach FileGuard Monitor

Open PowerShell or Command Prompt as Administrator on the target machine and pass your target directory and cloud login parameters:

Save your enrollment configuration as agent.conf, set the monitored folder in config.txt, then run FileGuard.exe.

Optional Flags:

  • --recursive : Enables sub-directory tree watching.
  • --background : Runs process silently as a detached Windows background task.

Viewing Logs & Real-Time Alerts

Once connected, FileGuard buffers changes locally and dispatches events to your cloud portal in real time. To view logs and trigger alert events, sign into the central console:

Access Cloud Audit Dashboard →