FILTER_VOLUME_STANDARD_INFORMATION - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
// fltuserstructures.h

typedef struct _FILTER_VOLUME_STANDARD_INFORMATION {
  ULONG               NextEntryOffset;
  ULONG               Flags;
  ULONG               FrameID;
  FLT_FILESYSTEM_TYPE FileSystemType;
  USHORT              FilterVolumeNameLength;
  WCHAR               FilterVolumeName[1];
} FILTER_VOLUME_STANDARD_INFORMATION, *PFILTER_VOLUME_STANDARD_INFORMATION;

View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Windows Driver Kit DDI reference (ns-fltuserstructures-_filter_volume_standard_information)

_FILTER_VOLUME_STANDARD_INFORMATION structure

Description

The caller-allocated FILTER_VOLUME_STANDARD_INFORMATION structure contains information for a volume.

Members

NextEntryOffset

Read-only offset, in bytes, of the next FILTER_VOLUME_STANDARD_INFORMATION structure if multiple structures are present in the buffer. This member is zero if no other structures follow this one.

Flags

A read-only bitmask of system-defined flags that describe attributes of the volume. The following are valid flag values.

Flag Meaning
FLTFL_VSI_DETACHED_VOLUME The volume in not currently attached to a storage stack.

FrameID

Read-only member used to identify the filter manager frame that the volume is in.

FileSystemType

Read-only member used to identify the type of file system being used on the volume. The possible values for this member are listed in FLT_FILESYSTEM_TYPE.

FilterVolumeNameLength

Read-only length, in bytes, of the volume name.

FilterVolumeName

Read-only name of the volume of FilterVolumeNameLength length. This Unicode string is not NULL-terminated.

Remarks

Filter manager enumeration routines, such as FltEnumerateVolumeInformation, can fill a buffer with structures of type FILTER_VOLUME_STANDARD_INFORMATION where each structure represents a volume known to filter manager. This list of structures can contain multiple volumes with the same name. For more information, see Understanding Volume Enumerations with Duplicate Volume Names.

The FILTER_VOLUME_STANDARD_INFORMATION structure must be aligned on a LONGLONG (8-byte) boundary. If a buffer contains two or more of these structures, the NextEntryOffset value in each entry falls on an 8-byte boundary.

A FILTER_VOLUME_STANDARD_INFORMATION structure can be allocated from paged or nonpaged pool.

See also

FILTER_VOLUME_BASIC_INFORMATION

FilterVolumeFindClose

FilterVolumeFindFirst

FilterVolumeFindNext

FltEnumerateVolumeInformation

FltEnumerateVolumes