1. A computer-implemented method for write filtering, wherein a write filter comprises a file exclusion list, the method comprising: receiving a function call from an application programming interface to perform at least one of (1) read certain data from a file or (2) write particular data to a file; If the received function call is to read the certain data from a file, then determining whether the certain data is in a cache memory; In response to said determining indicating that the certain data is in the cache memory, reading the certain data from the cache memory, and returning the certain data from the cache memory to the application program interface, and In response to said determining indicating that the certain data is not in the cache memory, passing the read function call to a system driver; and If the function call is to write particular data to a file, then determining whether the particular data is to be written to a file identified on the file exclusion list; In response to said determining indicating that the particular data is to be written to a file identified on the file exclusion list, writing the particular data to the file, and returning notification of a successful write to the application program interface, In response to said determining indicating that the particular data is to be written to a file not identified on the file exclusion list, writing the particular data to a cache memory, and returning notification of a successful write to the application programming interface.