From: Odomae on
I am trying to scan files in user land when a file write happens to a USB
drive.
My FS filter is attached to the drive I am interested in.

When I copy a file to the drive and capture the windbg log, I see that for
every copy, post cretae() is invoked multiple times. Why is this the case?