is it possible to get the name of the process that caused the change in the filesystem?
i want to do this programmatically [ie, i can't use any external 3rd party tools like handle]
any ideas?
The OS doesn't provide such information. You would need a file system filter driver for fine-grain control over changes made on the file system.