I am devleoping the file filter driver on windows.
I want to detect the compressing operation on windows , so i listen the IRP_MJ_WRITE in my minifilter dirver and calculate the entropy to determine the file is compressed or not.

I expect when doing the compression form the buit-in zip button the IRP_MJ_WRITE will pass to my minifilter , but it doesn’t.

I also write the code to test the compression operaiton , the following code will trigger the IRP_MJ_WRITE :

ZipArchive zip = ZipFile.Open("C:\Temp\test.zip", ZipArchiveMode.Create);
zip.CreateEntryFromFile("C:\Temp\test.txt", Path.GetFileName("C:\Temp\test.txt"));
zip.Dispose();

Furthermore i use the buit-in command tar to do the compression , it also triggers the IRP_MJ_WRITE.