FltGetRequestorProcessIdEx - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
// fltkernel.h

HANDLE FLTAPI FltGetRequestorProcessIdEx(
  [in] PFLT_CALLBACK_DATA CallbackData
);
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (nf-fltkernel-fltgetrequestorprocessidex)

FltGetRequestorProcessIdEx function

Description

The FltGetRequestorProcessIdEx routine returns the kernel-mode handle for the process that is associated with the thread that requested a given I/O operation.

Parameters

CallbackData [in]

A pointer to an FLT_CALLBACK_DATA structure that identifies the thread and the I/O operation.

Return value

The FltGetRequestorProcessIdEx routine returns the kernel-mode handle for the process that is associated with the thread that originally requested the I/O operation. If the operation is not associated with any thread, FltGetRequestorProcessIdEx returns NULL.

Remarks

The FltGetRequestorProcessIdEx routine returns the kernel-mode handle for the process that the requesting thread is currently attached to. This process may or may not be the same process that created the thread.

See also

FLT_CALLBACK_DATA

FltGetRequestorProcess

View the official Windows Driver Kit DDI reference

Edit description on GitHub