It seems that tracking file activities on win NT family, is not such an easy task to do. I've used API spying techniques to do that, but I can't track activities made by CreateFileMapping and MapViewOfFile functions. Just ReadFile WriteFile and their family can be tracked using API Spying techniques.

Please help me.