FltAcknowledgeEcp - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// fltkernel.h
VOID FLTAPI FltAcknowledgeEcp(
[in] PFLT_FILTER Filter,
[in] PVOID EcpContext
);
View the official Windows Driver Kit DDI referenceNo description available.
The FltAcknowledgeEcp routine is used to mark an extra create parameter context structure (ECP) as acknowledged.
Filter [in]Opaque filter pointer for the minifilter driver. This pointer uniquely identifies the minifilter driver and remains constant as long as the minifilter driver is loaded.
EcpContext [in]Pointer to the ECP to mark as acknowledged.
None
This routine is available in Windows Vista and later.
The ECP pointed to by the EcpContext parameter is marked as "acknowledged" by this routine. This acknowledgment could indicate a number of things, including whether the ECP has been looked at, used, processed, and so on. Note that the FltIsEcpAcknowledged routine can be used to determine if a particular ECP has been marked as acknowledged.
FltAllocateExtraCreateParameterFromLookasideList