The required log analyzer for windows audit file names in C#. In the log output format of messages about file operations looks like this:
You want to get the file name in the format \Device\HarddiskVolumeNN (NN is the partition number)\path\to\file.ext name of the file. Quite satisfied with the drive as "\Device\HarddiskVolume", and the letter I then replaced using replace.
Found that "seems" this can be done via WMI, but it seems to me that this is a long operation, at the same time the logging system does this without any noticeable delays.