Microsoft-Windows-FltMgrTrace_ea03a1fb6ae035732e424f45e3f31acf
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 10 | Event ID 10 | Operational | N | N |
| 11 | Event ID 11 | Operational | N | N |
| 12 | Event ID 12 | Operational | N | N |
| 13 | Event ID 13 | Operational | N | N |
| 14 | Event ID 14 | Operational | N | N |
| 15 | Event ID 15 | Operational | N | N |
| 16 | Event ID 16 | Operational | N | N |
| 17 | Event ID 17 | Operational | N | N |
| 18 | Event ID 18 | Operational | N | N |
| 19 | Event ID 19 | Operational | N | N |
| 20 | Event ID 20 | Operational | N | N |
| 21 | Event ID 21 | Operational | N | N |
| 22 | Event ID 22 | Operational | N | N |
| 23 | Event ID 23 | Operational | N | N |
| 24 | Event ID 24 | Operational | N | N |
| 25 | Event ID 25 | Operational | N | N |
| 26 | Event ID 26 | Operational | N | N |
| 27 | Event ID 27 | Operational | N | N |
| 28 | Event ID 28 | Operational | N | N |
| 29 | Event ID 29 | Operational | N | N |
| 30 | Event ID 30 | Operational | N | N |
| 31 | Event ID 31 | Operational | N | N |
| 32 | Event ID 32 | Operational | N | N |
| 33 | Event ID 33 | Operational | N | N |
| 34 | Event ID 34 | Operational | N | N |
| 35 | Event ID 35 | Operational | N | N |
| 36 | Event ID 36 | Operational | N | N |
| 37 | Event ID 37 | Operational | N | N |
| 38 | Event ID 38 | Operational | N | N |
| 39 | Event ID 39 | Operational | N | N |
| 40 | Event ID 40 | Operational | N | N |
| 41 | Event ID 41 | Operational | N | N |
| 42 | Event ID 42 | Operational | N | N |
| 43 | Event ID 43 | Operational | N | N |
| 44 | Event ID 44 | Operational | N | N |
| 45 | Event ID 45 | Operational | N | N |
| 46 | Event ID 46 | Operational | N | N |
| 47 | Event ID 47 | Operational | N | N |
| 48 | Event ID 48 | Operational | N | N |
| 49 | Event ID 49 | Operational | N | N |
| 50 | Event ID 50 | Operational | N | N |
| 51 | Event ID 51 | Operational | N | N |
| 52 | Event ID 52 | Operational | N | N |
| 53 | Event ID 53 | Operational | N | N |
| 54 | Event ID 54 | Operational | N | N |
| 55 | Event ID 55 | Operational | N | N |
| 56 | Event ID 56 | Operational | N | N |
| 57 | Event ID 57 | Operational | N | N |
| 58 | Event ID 58 | Operational | N | N |
| 59 | Event ID 59 | Operational | N | N |
| 60 | Event ID 60 | Operational | N | N |
| 61 | Event ID 61 | Operational | N | N |
| 62 | Event ID 62 | Operational | N | N |
| 63 | Event ID 63 | Operational | N | N |
| 64 | Event ID 64 | Operational | N | N |
| 65 | Event ID 65 | Operational | N | N |
| 66 | Event ID 66 | Operational | N | N |
| 67 | Event ID 67 | Operational | N | N |
| 68 | Event ID 68 | Operational | N | N |
| 69 | Event ID 69 | Operational | N | N |
| 70 | Event ID 70 | Operational | N | N |
| 71 | Event ID 71 | Operational | N | N |
| 72 | Event ID 72 | Operational | N | N |
| 73 | Event ID 73 | Operational | N | N |
| 74 | Event ID 74 | Operational | N | N |
| 75 | Event ID 75 | Operational | N | N |
| 76 | Event ID 76 | Operational | N | N |
| 77 | Event ID 77 | Operational | N | N |
| 78 | Event ID 78 | Operational | N | N |
| 79 | Event ID 79 | Operational | N | N |
| 80 | Event ID 80 | Operational | N | N |
| 81 | Event ID 81 | Operational | N | N |
| 82 | Event ID 82 | Operational | N | N |
| 83 | Event ID 83 | Operational | N | N |
| 84 | Event ID 84 | Operational | N | N |
| 85 | Event ID 85 | Operational | N | N |
| 86 | Event ID 86 | Operational | N | N |
| 87 | Event ID 87 | Operational | N | N |
| 88 | Event ID 88 | Operational | N | N |
| 89 | Event ID 89 | Operational | N | N |
| 90 | Event ID 90 | Operational | N | N |
| 91 | Event ID 91 | Operational | N | N |
| 92 | Event ID 92 | Operational | N | N |
| 93 | Event ID 93 | Operational | N | N |
| 94 | Event ID 94 | Operational | N | N |
| 95 | Event ID 95 | Operational | N | N |
| 96 | Event ID 96 | Operational | N | N |
| 97 | Event ID 97 | Operational | N | N |
| 98 | Event ID 98 | Operational | N | N |
| 99 | Event ID 99 | Operational | N | N |
| 100 | Event ID 100 | Operational | N | N |
| 101 | Event ID 101 | Operational | N | N |
| 102 | Event ID 102 | Operational | N | N |
| 103 | Event ID 103 | Operational | N | N |
| 104 | Event ID 104 | Operational | N | N |
| 105 | Event ID 105 | Operational | N | N |
| 106 | Event ID 106 | Operational | N | N |
| 107 | Event ID 107 | Operational | N | N |
| 108 | Event ID 108 | Operational | N | N |
| 109 | Event ID 109 | Operational | N | N |
| 110 | Event ID 110 | Operational | N | N |
| 111 | Event ID 111 | Operational | N | N |
| 112 | Event ID 112 | Operational | N | N |
| 113 | Event ID 113 | Operational | N | N |
| 114 | Event ID 114 | Operational | N | N |
| 115 | Event ID 115 | Operational | N | N |
| 116 | Event ID 116 | Operational | N | N |
| 117 | Event ID 117 | Operational | N | N |
| 118 | Event ID 118 | Operational | N | N |
| 119 | Event ID 119 | Operational | N | N |
| 120 | Event ID 120 | Operational | N | N |
| 121 | Event ID 121 | Operational | N | N |
| 122 | Event ID 122 | Operational | N | N |
| 123 | Event ID 123 | Operational | N | N |
| 124 | Event ID 124 | Operational | N | N |
| 125 | Event ID 125 | Operational | N | N |
| 126 | Event ID 126 | Operational | N | N |
| 127 | Event ID 127 | Operational | N | N |
| 128 | Event ID 128 | Operational | N | N |
| 129 | Event ID 129 | Operational | N | N |
| 130 | Event ID 130 | Operational | N | N |
| 131 | Event ID 131 | Operational | N | N |
| 132 | Event ID 132 | Operational | N | N |
| 133 | Event ID 133 | Operational | N | N |
| 134 | Event ID 134 | Operational | N | N |
| 135 | Event ID 135 | Operational | N | N |
| 136 | Event ID 136 | Operational | N | N |
| 137 | Event ID 137 | Operational | N | N |
| 138 | Event ID 138 | Operational | N | N |
| 139 | Event ID 139 | Operational | N | N |
| 140 | Event ID 140 | Operational | N | N |
| 141 | Event ID 141 | Operational | N | N |
| 142 | Event ID 142 | Operational | N | N |
| 143 | Event ID 143 | Operational | N | N |
| 144 | Event ID 144 | Operational | N | N |
| 145 | Event ID 145 | Operational | N | N |
| 146 | Event ID 146 | Operational | N | N |
| 147 | Event ID 147 | Operational | N | N |
| 148 | Event ID 148 | Operational | N | N |
| 149 | Event ID 149 | Operational | N | N |
| 150 | Event ID 150 | Operational | N | N |
| 151 | Event ID 151 | Operational | N | N |
| 152 | Event ID 152 | Operational | N | N |
| 153 | Event ID 153 | Operational | N | N |
| 154 | Event ID 154 | Operational | N | N |
| 155 | Event ID 155 | Operational | N | N |
| 156 | Event ID 156 | Operational | N | N |
| 157 | Event ID 157 | Operational | N | N |
| 158 | Event ID 158 | Operational | N | N |
| 159 | Event ID 159 | Operational | N | N |
| 160 | Event ID 160 | Operational | N | N |
| 161 | Event ID 161 | Operational | N | N |
| 162 | Event ID 162 | Operational | N | N |
| 163 | Event ID 163 | Operational | N | N |
| 164 | Event ID 164 | Operational | N | N |
| 165 | Event ID 165 | Operational | N | N |
| 166 | Event ID 166 | Operational | N | N |
| 167 | Event ID 167 | Operational | N | N |
| 168 | Event ID 168 | Operational | N | N |
| 169 | Event ID 169 | Operational | N | N |
| 170 | Event ID 170 | Operational | N | N |
| 171 | Event ID 171 | Operational | N | N |
| 172 | Event ID 172 | Operational | N | N |
| 173 | Event ID 173 | Operational | N | N |
| 174 | Event ID 174 | Operational | N | N |
| 175 | Event ID 175 | Operational | N | N |
| 176 | Event ID 176 | Operational | N | N |
| 177 | Event ID 177 | Operational | N | N |
| 178 | Event ID 178 | Operational | N | N |
| 179 | Event ID 179 | Operational | N | N |
| 180 | Event ID 180 | Operational | N | N |
| 181 | Event ID 181 | Operational | N | N |
| 182 | Event ID 182 | Operational | N | N |
| 183 | Event ID 183 | Operational | N | N |
| 184 | Event ID 184 | Operational | N | N |
| 185 | Event ID 185 | Operational | N | N |
| 186 | Event ID 186 | Operational | N | N |
| 187 | Event ID 187 | Operational | N | N |
| 188 | Event ID 188 | Operational | N | N |
| 189 | Event ID 189 | Operational | N | N |
| 190 | Event ID 190 | Operational | N | N |
| 191 | Event ID 191 | Operational | N | N |
| 192 | Event ID 192 | Operational | N | N |
| 193 | Event ID 193 | Operational | N | N |
| 194 | Event ID 194 | Operational | N | N |
| 195 | Event ID 195 | Operational | N | N |
| 196 | Event ID 196 | Operational | N | N |
| 197 | Event ID 197 | Operational | N | N |
| 198 | Event ID 198 | Operational | N | N |
| 199 | Event ID 199 | Operational | N | N |
| 200 | Event ID 200 | Operational | N | N |
| 201 | Event ID 201 | Operational | N | N |
| 202 | Event ID 202 | Operational | N | N |
| 203 | Event ID 203 | Operational | N | N |
| 204 | Event ID 204 | Operational | N | N |
| 205 | Event ID 205 | Operational | N | N |
| 206 | Event ID 206 | Operational | N | N |
| 207 | Event ID 207 | Operational | N | N |
| 208 | Event ID 208 | Operational | N | N |
| 209 | Event ID 209 | Operational | N | N |
| 210 | Event ID 210 | Operational | N | N |
| 211 | Event ID 211 | Operational | N | N |
| 212 | Event ID 212 | Operational | N | N |
| 213 | Event ID 213 | Operational | N | N |
| 214 | Event ID 214 | Operational | N | N |
| 215 | Event ID 215 | Operational | N | N |
| 216 | Event ID 216 | Operational | N | N |
| 217 | Event ID 217 | Operational | N | N |
| 218 | Event ID 218 | Operational | N | N |
| 219 | Event ID 219 | Operational | N | N |
| 220 | Event ID 220 | Operational | N | N |
| 221 | Event ID 221 | Operational | N | N |
| 222 | Event ID 222 | Operational | N | N |
| 223 | Event ID 223 | Operational | N | N |
| 224 | Event ID 224 | Operational | N | N |
| 225 | Event ID 225 | Operational | N | N |
| 226 | Event ID 226 | Operational | N | N |
| 227 | Event ID 227 | Operational | N | N |
| 228 | Event ID 228 | Operational | N | N |
| 229 | Event ID 229 | Operational | N | N |
| 230 | Event ID 230 | Operational | N | N |
| 231 | Event ID 231 | Operational | N | N |
| 232 | Event ID 232 | Operational | N | N |
| 233 | Event ID 233 | Operational | N | N |
| 234 | Event ID 234 | Operational | N | N |
| 235 | Event ID 235 | Operational | N | N |
| 236 | Event ID 236 | Operational | N | N |
| 237 | Event ID 237 | Operational | N | N |
| 238 | Event ID 238 | Operational | N | N |
| 239 | Event ID 239 | Operational | N | N |
| 240 | Event ID 240 | Operational | N | N |
| 241 | Event ID 241 | Operational | N | N |
| 242 | Event ID 242 | Operational | N | N |
| 243 | Event ID 243 | Operational | N | N |
| 244 | Event ID 244 | Operational | N | N |
| 245 | Event ID 245 | Operational | N | N |
| 246 | Event ID 246 | Operational | N | N |
Event ID 11
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_IrpCtrlCompletionStackLength Int32 | |
A11_newStackSize Int32 | |
A12_IrpCtrl Pointer |
Event ID 12
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_newCNodeIrpCtrl Pointer | |
A11_newCNode Pointer | |
A12_newCNodeDataSnapshotMajorFunction Int32 |
Event ID 13
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_newCNodeIrpCtrl Pointer | |
A11_newCNode Pointer | |
A12_newCNodeDataSnapshotMajorFunction Int32 |
Event ID 14
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_IrpCtrl Pointer | |
A11_CHARnewCNodeDataSnapshotMajorFunction Int32 | |
A12_CHARnewCNodeDataSnapshotMinorFunction Int32 |
Event ID 16
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_OpType Int32 | |
A11_irpCtrl Pointer | |
A12_FrameReserveIrpCtrlsStaticOwningThreadOpType Pointer |
Event ID 17
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_OpType Int32 | |
A11_IrpCtrl Pointer | |
A12_FrameReserveIrpCtrlsStaticOwningThreadOpType Pointer |
Event ID 18
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_irpCtrl Pointer | |
A11_th Pointer | |
A12_FrameReserveIrpCtrlsEntriesiCount Int32 | |
A13_i Int32 |
Event ID 19
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_irpCtrl Pointer | |
A11_th Pointer | |
A12_FrameReserveIrpCtrlsEntriesiCount Int32 | |
A13_i Int32 |
Event ID 20
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_IrpCtrl Pointer | |
A11_IrpCtrlDataThread Pointer | |
A12_FrameReserveIrpCtrlsEntriesiCount Int32 | |
A13_i Int32 |
Event ID 21
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FsControlDeviceObject Pointer | |
A11_NULL Pointer | |
A12_ControlDeviceName CountedUtf16String | |
A13_GET_DEVICE_TYPE_NAMEFsControlDeviceObjectDeviceType AnsiString |
Event ID 25
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_NewDeviceObject Pointer | |
A11_NULL Pointer | |
A12__cdoDevExtControlDeviceName CountedUtf16String | |
A13_GET_DEVICE_TYPE_NAMENewDeviceObjectDeviceType AnsiString |
Event ID 26
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_NewDeviceObject Pointer | |
A11_volume Pointer | |
A12__volumeDeviceName CountedUtf16String | |
A13_GET_DEVICE_TYPE_NAMENewDeviceObjectDeviceType AnsiString | |
A14_DeviceObjectToAttachTo Pointer |
Event ID 27
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_DeviceObject Pointer | |
A11_NULL Pointer | |
A12__cdoDevExtControlDeviceName CountedUtf16String | |
A13_GET_DEVICE_TYPE_NAMEDeviceObjectDeviceType AnsiString | |
A14_NotifyFlags HexInt32 |
Event ID 28
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_DeviceObject Pointer | |
A11_volume Pointer | |
A12__volumeDeviceName CountedUtf16String | |
A13_GET_DEVICE_TYPE_NAMEDeviceObjectDeviceType AnsiString | |
A14_NotifyFlags HexInt32 | |
A15_devExtHeaderAttachedToDeviceObject Pointer |
Event ID 31
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_origBufferPtr Pointer | |
A11_origMdlAddressPtrorigMdlAddressPtrNULL Pointer | |
A12_newBufferPtr Pointer | |
A13_newMdlAddressPtrnewMdlAddressPtrNULL Pointer |
Event ID 32
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_eventIrpPtr Pointer | |
A11_eventMajorFunction UInt32 | |
A12_CallbackNodeInstance Pointer | |
A13__CallbackNodeInstanceAltitude CountedUtf16String | |
A14_CallbackNodeInstanceFilter Pointer | |
A15__CallbackNodeInstanceFilterName CountedUtf16String | |
A16_IrpCtrlInitiatingInstance Pointer | |
A17_eventFileObject Pointer | |
A18_eventFsContext Pointer | |
A19_status HexInt32 | |
A20_IrpCtrlTraceStatus HexInt32 |
Event ID 33
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_eventIrpPtr Pointer | |
A11_eventMajorFunction UInt32 | |
A12_CallbackNodeInstance Pointer | |
A13__CallbackNodeInstanceAltitude CountedUtf16String | |
A14_CallbackNodeInstanceFilter Pointer | |
A15__CallbackNodeInstanceFilterName CountedUtf16String | |
A16_IrpCtrlInitiatingInstance Pointer | |
A17_eventFileObject Pointer | |
A18_eventFsContext Pointer | |
A19_status HexInt32 | |
A20_IrpCtrlTraceStatus HexInt32 |
Event ID 34
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_eventIrpPtr Pointer | |
A11_eventMajorFunction UInt32 | |
A12_CallbackNodeInstance Pointer | |
A13__CallbackNodeInstanceAltitude CountedUtf16String | |
A14_CallbackNodeInstanceFilter Pointer | |
A15__CallbackNodeInstanceFilterName CountedUtf16String | |
A16_IrpCtrlInitiatingInstance Pointer | |
A17_eventFileObject Pointer | |
A18_eventFsContext Pointer | |
A19_status HexInt32 |
Event ID 35
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_eventIrpPtr Pointer | |
A11_eventMajorFunction UInt32 | |
A12_CallbackNodeInstance Pointer | |
A13__CallbackNodeInstanceAltitude CountedUtf16String | |
A14_CallbackNodeInstanceFilter Pointer | |
A15__CallbackNodeInstanceFilterName CountedUtf16String | |
A16_IrpCtrlInitiatingInstance Pointer | |
A17_eventFileObject Pointer | |
A18_eventFsContext Pointer | |
A19_status HexInt32 |
Event ID 36
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_eventIrpPtr Pointer | |
A11_eventMajorFunction UInt32 | |
A12_IrpCtrlInitiatingInstance Pointer | |
A13_eventFileObject Pointer | |
A14_eventFsContext Pointer | |
A15_status HexInt32 |
Event ID 37
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_eventIrpPtr Pointer | |
A11_eventMajorFunction UInt32 | |
A12_IrpCtrlInitiatingInstance Pointer | |
A13_eventFileObject Pointer | |
A14_eventFsContext Pointer | |
A15_status HexInt32 |
Event ID 38
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_KeGetCurrentThread Pointer | |
A11_irpCtrlFileObject Pointer | |
A12_volume Pointer | |
A13_CHARirpMajorId Int32 | |
A14_FltGetIrpNameirpMajorId AnsiString |
Event ID 39
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_irpMajorId HexInt32 | |
A11_irpCtrl Pointer | |
A12_callbackNode Pointer | |
A13_FlagOnirpCtrlFlagsIRPCTRFL_SYNCHRONIZESYNCNotSYNC AnsiString |
Event ID 41
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CompNodeIrpCtrl Pointer | |
A11_CompNode Pointer | |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 |
Event ID 42
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CompNodeIrpCtrl Pointer | |
A11_CompNode Pointer | |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 |
Event ID 43
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_irpCtrl Pointer | |
A11_CompNode Pointer | |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 |
Event ID 44
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString |
Event ID 45
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString |
Event ID 46
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_irpCtrl Pointer | |
A11_CompNode Pointer | |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 |
Event ID 47
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | |
A13_irpCtrl Pointer |
Event ID 48
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CompNodeIrpCtrl Pointer | |
A11_CompNode Pointer | |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 |
Event ID 49
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_irpCtrl Pointer | |
A11_CompNode Pointer | |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 |
Event ID 50
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString |
Event ID 51
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString |
Event ID 52
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_irpCtrl Pointer | |
A11_CompNode Pointer | |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 |
Event ID 53
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | |
A13_irpCtrl Pointer |
Event ID 54
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CompNodeIrpCtrl Pointer | |
A11_CompNode Pointer | |
A12_CHARCompNodeDataSnapshotMajorFunction Int32 |
Event ID 56
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CHARlocalIrpCtrlDataIopbMajorFunction Int32 | |
A11_CHARlocalIrpCtrlDataIopbMinorFunction Int32 | |
A12_FltGetIrpNamelocalIrpCtrlDataIopbMajorFunction AnsiString | |
A13_localCompNodeIrpCtrl Pointer |
Event ID 57
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_completionNodeIrpCtrl Pointer | |
A11_completionNode Pointer | |
A12_CHARcompletionNodeDataSnapshotMajorFunction Int32 |
Event ID 60
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_completionNodeIrpCtrl Pointer | |
A11_completionNode Pointer | |
A12_CHARcompletionNodeDataSnapshotMajorFunction Int32 |
Event ID 61
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CHARirpCtrlDataIopbMajorFunction Int32 | |
A11_CHARirpCtrlDataIopbMinorFunction Int32 | |
A12_FltGetIrpNameirpCtrlDataIopbMajorFunction AnsiString | |
A13_irpCtrl Pointer |
Event ID 64
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_ExceptionPointerExceptionRecordExceptionCode HexInt32 | |
A11_ExceptionPointerContextRecord Pointer | |
A12_ExceptionPointerExceptionRecord Pointer | |
A13_ExceptionPointerExceptionRecordExceptionAddress Pointer |
Event ID 83
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_fileList Pointer | |
A11_fileListFlags HexInt32 | |
A12_fileListUseCount Int32 |
Event ID 84
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_fileList Pointer | |
A11_fileListFlags HexInt32 | |
A12_fileListUseCount Int32 |
Event ID 85
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_newFileList Pointer | |
A11_newFileListFlags HexInt32 | |
A12_newFileListUseCount Int32 |
Event ID 86
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_fileList Pointer | |
A11_fileListFlags HexInt32 | |
A12_fileListUseCount Int32 |
Event ID 87
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_newFileList Pointer | |
A11_newFileListFlags HexInt32 | |
A12_newFileListUseCount Int32 |
Event ID 88
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FileList Pointer | |
A11_FileListFlags HexInt32 | |
A12_FileListUseCount Int32 |
Event ID 89
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FileList Pointer | |
A11_FileListFlags HexInt32 | |
A12_FileListUseCount Int32 |
Event ID 90
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FileList Pointer | |
A11_FileListFlags HexInt32 | |
A12_FileListUseCount Int32 |
Event ID 94
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_KeQueryMaximumProcessorCountExALL_PROCESSOR_GROUPS Int32 |
Event ID 110
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FltGetIrpNameirpSpMajorFunction AnsiString | |
A11_irpSpMajorFunction Int32 |
Event ID 111
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_irpSpFileObject Pointer | |
A11__irpSpFileObjectFileName CountedUtf16String |
Event ID 112
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_IrpCtrlIrp Pointer | |
A11_IrpCtrlDataIopbMajorFunction Int32 |
Event ID 115
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_KeGetCurrentThread Pointer | |
A11_fileObject Pointer | |
A12_iccVolume Pointer | |
A13_fileObjectFileName CountedUtf16String |
Event ID 117
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_fileObject Pointer | |
A11__fileObjectFileName CountedUtf16String |
Event ID 118
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_KeGetCurrentThread Pointer | |
A11_IrpCtrlFileObject Pointer | |
A12_volume Pointer | |
A13_IrpCtrlDataIoStatusStatus HexInt32 |
Event ID 119
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_KeGetCurrentThread Pointer | |
A11_IrpCtrlFileObject Pointer | |
A12_volume Pointer | |
A13_IrpCtrlDataIoStatusStatus HexInt32 |
Event ID 121
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_newDeviceObject Pointer | |
A11_volume Pointer | |
A12__volumeDeviceName CountedUtf16String | |
A13_status HexInt32 | |
A14_FltpGetFsDeviceObjectAfterMountdiskDeviceObject Pointer | |
A15_FsControlDeviceObject Pointer |
Event ID 122
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_DeviceObject Pointer | |
A11__devExtControlDeviceName CountedUtf16String |
Event ID 123
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_DeviceObject Pointer | |
A11_NULL Pointer | |
A12__devExtControlDeviceName CountedUtf16String | |
A13_IrpIoStatusStatus HexInt32 |
Event ID 125
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_Context Pointer | |
A11_regWatchContextNotificationStatus HexInt32 |
Event ID 126
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_regWatchContext Pointer | |
A11_regWatchContextNotificationStatus HexInt32 |
Event ID 128
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_status HexInt32 | |
A11__tempString CountedUtf16String |
Event ID 129
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_status HexInt32 | |
A11__tempString CountedUtf16String |
Event ID 130
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_frameFrameID Int32 | |
A11__frameAltitudeIntervalLow CountedUtf16String | |
A12__frameAltitudeIntervalHigh CountedUtf16String |
Event ID 133
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_ctxFlags Pointer | |
A11_FltGlobalsManualAttachDelayCounter Int32 | |
A12_FltGlobalsManualDeviceAttachLimit Int32 |
Event ID 134
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_ctxFlags Pointer | |
A11_FltGlobalsManualAttachDelayCounter Int32 | |
A12_FltGlobalsManualDeviceAttachLimit Int32 |
Event ID 135
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_TopFrameFrameID Int32 | |
A11__TopFrameAltitudeIntervalLow CountedUtf16String | |
A12__TopFrameAltitudeIntervalHigh CountedUtf16String | |
A13__TopFrameAltitudeIntervalLow CountedUtf16String | |
A14_legacyAltitude CountedUtf16String |
Event ID 136
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10__DriverObjDriverExtensionServiceKeyName CountedUtf16String | |
A11_PCWCHARvalueInfoData UnicodeString |
Event ID 137
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_Filter Pointer | |
A11__FilterName CountedUtf16String | |
A12_instance Pointer | |
A13_Volume Pointer | |
A14__VolumeDeviceName CountedUtf16String |
Event ID 138
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_Filter Pointer | |
A11__FilterName CountedUtf16String | |
A12_instance Pointer | |
A13_Volume Pointer | |
A14__VolumeDeviceName CountedUtf16String |
Event ID 139
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_InstanceFilter Pointer | |
A11__InstanceFilterName CountedUtf16String | |
A12__InstanceAltitude CountedUtf16String | |
A13_Volume Pointer | |
A14__VolumeDeviceName CountedUtf16String |
Event ID 140
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_currentInstance Pointer | |
A11_currentInstanceFilter Pointer | |
A12__currentInstanceFilterName CountedUtf16String | |
A13__InstanceAltitude CountedUtf16String |
Event ID 141
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_filter Pointer | |
A11__filterName CountedUtf16String | |
A12_Instance Pointer | |
A13_volume Pointer | |
A14__volumeDeviceName CountedUtf16String | |
A15_Reason HexInt32 |
Event ID 142
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_Buffer Pointer | |
A11_fileOffsetQuadPart HexInt64 | |
A12_Length HexInt32 |
Event ID 143
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_Buffer Pointer | |
A11_fileOffsetQuadPart HexInt64 | |
A12_Length HexInt32 |
Event ID 145
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_Buffer Pointer | |
A11_fileOffsetQuadPart HexInt64 | |
A12_Length HexInt32 |
Event ID 146
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_Buffer Pointer | |
A11_fileOffsetQuadPart HexInt64 | |
A12_Length HexInt32 |
Event ID 150
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_MdlChain Pointer | |
A11_FileOffsetQuadPart HexInt64 | |
A12_Length HexInt32 |
Event ID 154
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_MdlChain Pointer | |
A11_FileOffsetQuadPart HexInt64 | |
A12_Length HexInt32 |
Event ID 184
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_nameCacheNode Pointer | |
A11_GenCtxFileObject Pointer | |
A12_nameCacheNodeTreeLinkFlags HexInt32 | |
A13_nameCacheNodeUseCount Int32 | |
A14__nameCacheNodeNameInfoName CountedUtf16String |
Event ID 185
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_nameCacheNode Pointer | |
A11_nameCacheNodeTreeLinkFlagsflagToClear HexInt32 | |
A12_nameCacheNodeUseCount Int32 | |
A13__nameCacheNodeNameInfoName CountedUtf16String |
Event ID 186
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_nameCacheNode Pointer | |
A11_FlagOnnameCacheNodeTreeLinkFlags0x0ffff HexInt32 | |
A12__nameCacheNodeNameInfoName CountedUtf16String |
Event ID 190
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_nameCacheNode Pointer | |
A11_GenCtxFileObject Pointer | |
A12_nameCacheNodeTreeLinkFlags HexInt32 | |
A13_nameCacheNodeUseCount Int32 | |
A14__nameCacheNodeNameInfoName CountedUtf16String |
Event ID 191
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_nameCacheNode Pointer | |
A11_GenCtxFileObject Pointer | |
A12_nameCacheNodeTreeLinkFlags HexInt32 | |
A13_nameCacheNodeUseCount Int32 | |
A14__nameCacheNodeNameInfoName CountedUtf16String |
Event ID 192
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_nameCacheNode Pointer | |
A11_GenCtxFileObject Pointer | |
A12_nameCacheNodeTreeLinkFlags HexInt32 | |
A13_nameCacheNodeUseCount Int32 | |
A14__nameCacheNodeNameInfoName CountedUtf16String |
Event ID 193
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_foundNameCacheNode Pointer | |
A11_GenCtxFileObject Pointer | |
A12_foundNameCacheNodeTreeLinkFlags HexInt32 | |
A13_foundNameCacheNodeUseCount Int32 | |
A14__foundNameCacheNodeNameInfoName CountedUtf16String |
Event ID 194
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_nameCacheNode Pointer | |
A11_GenCtxFileObject Pointer | |
A12_nameCacheNodeTreeLinkFlags HexInt32 | |
A13_nameCacheNodeUseCount Int32 | |
A14__nameCacheNodeNameInfoName CountedUtf16String |
Event ID 195
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_IrpCtrlNULLIrpCtrlDataIopbMajorFunction0xff HexInt32 | |
A11_IrpCtrlNULLIrpCtrlDataIopbMinorFunction0xff HexInt32 | |
A12__VolumeDeviceName CountedUtf16String | |
A13__FileObjectFileName CountedUtf16String | |
A14_FileObject Pointer |
Event ID 196
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_IrpCtrlNULLIrpCtrlDataIopbMajorFunction0xff HexInt32 | |
A11_IrpCtrlNULLIrpCtrlDataIopbMinorFunction0xff HexInt32 | |
A12__VolumeDeviceName CountedUtf16String | |
A13__FileObjectFileName CountedUtf16String | |
A14_FileObject Pointer |
Event ID 197
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FileNameInformation Pointer | |
A11_nameCacheNodeUseCount Int32 |
Event ID 201
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10__GenCtxShortFileName CountedUtf16String | |
A11__localGenCtxFileNameInformationName CountedUtf16String |
Event ID 202
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10__VolumeDeviceName CountedUtf16String | |
A11__FileObjectFileName CountedUtf16String | |
A12_FileObject Pointer |
Event ID 204
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_NameCtrl Pointer | |
A11_NameCtrlNameGenerationFlags HexInt32 | |
A12_NameCtrlError HexInt32 | |
A13_NameCtrlShareNameLength HexInt32 | |
A14_NameCtrlStreamNameLength HexInt32 | |
A15__NameCtrlName CountedUtf16String | |
A16__NameCtrlCurrentShortName CountedUtf16String |
Event ID 205
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_NameCtrl Pointer | |
A11_NameCtrlBufferSize HexInt32 | |
A12_NewSize HexInt32 | |
A13__NameCtrlName CountedUtf16String | |
A14_NameCtrlFlags HexInt32 | |
A15_FlagsToSet HexInt32 |
Event ID 206
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_GET_NAME_SUPPORT_VOLUME_DEVICE_NAMEGenCtx CountedUtf16String | |
A11_GenCtxFileObjectFileNameBuffer0 HexInt32 | |
A12_GenCtxFileObjectFileNameBuffer1 HexInt32 | |
A13_GenCtxFileObjectFileNameBuffer2 HexInt32 | |
A14_GenCtxFileObjectFileNameBuffer3 HexInt32 |
Event ID 210
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FileNameInformation Pointer | |
A11__FileNameInformationName CountedUtf16String | |
A12__FileNameInformationVolume CountedUtf16String | |
A13__FileNameInformationFinalComponent CountedUtf16String | |
A14__FileNameInformationExtension CountedUtf16String | |
A15__FileNameInformationStream CountedUtf16String | |
A16__FileNameInformationParentDir CountedUtf16String |
Event ID 211
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FileNameInformation Pointer | |
A11__FileNameInformationName CountedUtf16String | |
A12__FileNameInformationVolume CountedUtf16String | |
A13__FileNameInformationFinalComponent CountedUtf16String | |
A14__FileNameInformationExtension CountedUtf16String | |
A15__FileNameInformationStream CountedUtf16String | |
A16__FileNameInformationParentDir CountedUtf16String |
Event ID 212
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FileNameInformation Pointer | |
A11__FileNameInformationName CountedUtf16String | |
A12__FileNameInformationVolume CountedUtf16String | |
A13__FileNameInformationFinalComponent CountedUtf16String | |
A14__FileNameInformationExtension CountedUtf16String | |
A15__FileNameInformationStream CountedUtf16String | |
A16__FileNameInformationParentDir CountedUtf16String |
Event ID 214
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_CallbackDataIopbMajorFunction HexInt32 | |
A11_iccIrpCtrl Pointer | |
A12_iccIrpCtrlPendingCallbackNode Pointer | |
A13_FlagOniccIrpCtrlFlagsIRPCTRFL_SYNCHRONIZESYNCNotSYNC AnsiString |
Event ID 215
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_irpCtrlIrp Pointer | |
A11_irpCtrlDataIopbMajorFunction Int32 |
Event ID 216
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_irpCtrlIrp Pointer | |
A11_irpCtrlDataIopbMajorFunction Int32 |
Event ID 217
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_irpCtrlIrp Pointer | |
A11_irpCtrlDataIopbMajorFunction Int32 |
Event ID 218
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_status HexInt32 | |
A11__filterName CountedUtf16String |
Event ID 219
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10__filterName CountedUtf16String | |
A11__filterDefaultAltitude CountedUtf16String |
Event ID 223
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_streamList Pointer | |
A11_streamListFlags HexInt32 | |
A12_streamListUseCount Int32 |
Event ID 224
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_streamList Pointer | |
A11_streamListFlags HexInt32 | |
A12_streamListUseCount Int32 |
Event ID 225
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_newStreamList Pointer | |
A11_newStreamListFlags HexInt32 | |
A12_newStreamListUseCount Int32 |
Event ID 226
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_streamList Pointer | |
A11_streamListFlags HexInt32 | |
A12_streamListUseCount Int32 |
Event ID 227
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_newStreamList Pointer | |
A11_newStreamListFlags HexInt32 | |
A12_newStreamListUseCount Int32 |
Event ID 228
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_StreamList Pointer | |
A11_StreamListFlags HexInt32 | |
A12_StreamListUseCount Int32 |
Event ID 229
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_StreamList Pointer | |
A11_StreamListFlags HexInt32 | |
A12_StreamListUseCount Int32 |
Event ID 230
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_StreamList Pointer | |
A11_StreamListFlags HexInt32 | |
A12_StreamListUseCount Int32 |
Event ID 231
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FltObject Pointer | |
A11_PFLT_OBJECTFltObjectPointerCount Int32 | |
A12_reason AnsiString |
Event ID 232
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FltObject Pointer | |
A11_PFLT_OBJECTFltObjectPointerCount Int32 | |
A12_reason AnsiString |
Event ID 235
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_Volume Pointer | |
A11__VolumeDeviceName CountedUtf16String |
Event ID 236
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_KeGetCurrentThread Pointer | |
A11_FileObject Pointer | |
A12_Volume Pointer | |
A13_IrpMajor Int32 |
Event ID 237
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FltWork Pointer | |
A11_QueueType Int32 | |
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32 | |
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32 |
Event ID 238
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FltWork Pointer | |
A11_QueueType Int32 | |
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32 | |
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32 |
Event ID 239
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_fltWork Pointer | |
A11_QueueType Int32 | |
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32 | |
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32 |
Event ID 240
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_NULL Pointer | |
A11_QueueType Int32 | |
A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount Int32 | |
A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit Int32 |
Event ID 241
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_GenericWorkItem Pointer | |
A11_qtype Int32 | |
A12_fltObject Pointer | |
A13_GenericWorkItemGenericWorkerRoutine Pointer | |
A14_GenericWorkItemContext Pointer | |
A15_GenericWorkItemIoPriorityInfoIoPriority Int32 |
Event ID 242
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_DeferredWorkItem Pointer | |
A11_qtype Int32 | |
A12_instance Pointer | |
A13_DeferredWorkItemDeferredWorkerRoutine Pointer | |
A14_DeferredWorkItemContext Pointer | |
A15_DeferredWorkItemIoPriorityInfoIoPriority Int32 |
Event ID 243
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FltWorkItem Pointer | |
A11_FltWorkItemQueueType Int32 | |
A12_FltWorkItemFltObject Pointer | |
A13_FltWorkItemGenericWorkerRoutine Pointer | |
A14_FltWorkItemContext Pointer |
Event ID 244
#Fields #
| Name | Description |
|---|---|
FUNC AnsiString | |
A10_FltWorkItem Pointer | |
A11_FltWorkItemQueueType Int32 | |
A12_FltWorkItemInstance Pointer | |
A13_FltWorkItemDeferredWorkerRoutine Pointer | |
A14_FltWorkItemContext Pointer |