The IFS manager provides support for the Win32 APIs: FindFirstChangeNotify(), FindNextChangeNotify() and FindCloseChangeNotify(). The support is done entirely in the IFS manager so that the individual FSDs do not each need to have code for change notifications. FSDs are not aware of the presence of change notification. The FindNextChangeNotify and FindCloseChangeNotify functions are sent down the hook before eventually being processed in the IFS manager. The FindFirstChangeNotify is not sent down the file system API hook. It is strongly recommended that file system API hookers do not attempt to hook these APIs in any fashion. Since the notification event itself cannot be suppressed, it serves no purpose to hook these functions.
While the Win32 API is supported in toto for the most part, there are differences in the semantics of some filters. These are enumerated below.