ES_EVENT_TYPE_NOTIFY_CREATE event for new zip file creation

Hi,

I am implementing a feature to detect whenever a new zip file created in folder with EndpointSecurity API event

Code Block 
ES_EVENT_TYPE_NOTIFY_CREATE

however this event is not triggered when we compress a folder for "zip" file. It's captured in

Code Block 
ES_EVENT_TYPE_NOTIFY_OPEN

but that also triggered when just select any existing zip file so we can not distinguish between new and existing if I use

Code Block 
ES_EVENT_TYPE_NOTIFY_OPEN 

.

Let's say I have folder "test" and inside it there are several files and once we compress the folder "test" using mouse right click >> Compress "test". It will create "test.zip" in the same directory where "test" folder resides.

test.zip file is new file created based on compression so it should be captured with

Code Block 
ES_EVENT_TYPE_NOTIFY_CREATE

.


Please help me to detect the zip file creation event with EndPoint Security API. Any sample or reference would be helpful.