FILTER_FULL_INFORMATION - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// fltuserstructures.h
typedef struct _FILTER_FULL_INFORMATION {
ULONG NextEntryOffset;
ULONG FrameID;
ULONG NumberOfInstances;
USHORT FilterNameLength;
WCHAR FilterNameBuffer[1];
} FILTER_FULL_INFORMATION, *PFILTER_FULL_INFORMATION;
View the official Windows Driver Kit DDI referenceNo description available.
The FILTER_FULL_INFORMATION structure contains full information for a minifilter driver.
NextEntryOffsetByte offset of the next FILTER_FULL_INFORMATION entry, if multiple entries are present in a buffer. This member is zero if no other entries follow this one.
FrameIDZero-based index of the current frame.
NumberOfInstancesNumber of instances that currently exist for this minifilter.
FilterNameLengthLength, in bytes, of the minifilter name.
FilterNameBufferSpecifies the first character of the filter name string. This character is followed in memory by the remainder of the string. The length of the string is specified by the FilterNameLength member. The string is Unicode and is not NULL-terminated.
The FILTER_FULL_INFORMATION structure is passed as a parameter to routines such as FilterFindFirst, FilterFindNext, FilterGetInformation, FltEnumerateFilterInformation, and FltGetFilterInformation.
This structure must be aligned on a LONGLONG (8-byte) boundary. If a buffer contains two or more of these structures, the NextEntryOffset value in each entry, except the last, falls on an 8-byte boundary.
FILTER_AGGREGATE_BASIC_INFORMATION
FILTER_AGGREGATE_STANDARD_INFORMATION