// fltkernel.h

NTSTATUS FLTAPI FltGetRequestorSessionId(
  [in]  PFLT_CALLBACK_DATA CallbackData,
  [out] PULONG             SessionId
);
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (nf-fltkernel-fltgetrequestorsessionid)

FltGetRequestorSessionId function

Description

The FltGetRequestorSessionId routine returns the session ID of the process that originally requested the specified I/O operation.

Parameters

`CallbackData` [in]

A pointer to the FLT_CALLBACK_DATA structure specifying the I/O operation.

`SessionId` [out]

A pointer to the session ID for the requesting operation.

Return value

The FltGetRequestorSessionId routine returns STATUS_SUCCESS on success or STATUS_UNSUCCESSFUL on failure.

Remarks

If a process has no session ID, the SessionId parameter refers to -1 and the FltGetRequestorSessionId routine returns STATUS_SUCCESS.

If the FltGetRequestorSessionId routine returns STATUS_UNSUCCESSFUL, SessionId is not valid.

View the official Windows Driver Kit DDI reference