About

This Dazuko project provides a device driver allowing (userland) applications to execute online file access control. It was originally developed by Avira GmbH (formerly known as H+BEDV Datentechnik GmbH) to allow on-access virus scanning. Other uses include a file-access monitor/logger or external security tools.

Dazuko operates by intercepting file access calls and passing the file information to a userland application. The application then has the opportunity to tell the device driver to allow or deny the file access. The application also receives information about the file access event, such as accessed file name, type of access, process id, and user id.