ETW_DUPLICATE_HANDLE_EVENT - NtDoc

#ifndef _NTWMI_H
#include <pshpack1.h>

typedef struct _ETW_DUPLICATE_HANDLE_EVENT
{
    PVOID Object;
    ULONG SourceHandle;
    ULONG TargetHandle;
    ULONG TargetProcessId;
    USHORT ObjectType;
    ULONG SourceProcessId;
} ETW_DUPLICATE_HANDLE_EVENT, *PETW_DUPLICATE_HANDLE_EVENT;

#include <poppack.h>
#endif
View code on GitHub