INSTANCE_FULL_INFORMATION - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
// fltuserstructures.h
typedef struct _INSTANCE_FULL_INFORMATION {
ULONG NextEntryOffset;
USHORT InstanceNameLength;
USHORT InstanceNameBufferOffset;
USHORT AltitudeLength;
USHORT AltitudeBufferOffset;
USHORT VolumeNameLength;
USHORT VolumeNameBufferOffset;
USHORT FilterNameLength;
USHORT FilterNameBufferOffset;
} INSTANCE_FULL_INFORMATION, *PINSTANCE_FULL_INFORMATION;
View the official Windows Driver Kit DDI referenceNo description available.
The INSTANCE_FULL_INFORMATION structure contains full information for a minifilter instance.
NextEntryOffsetA byte offset of the next INSTANCE_FULL_INFORMATION entry. If multiple entries are present in a buffer, the last entry contains a zero.
InstanceNameLengthThe length, in bytes, of the instance name.
InstanceNameBufferOffsetA byte offset of the first character of the instance name string. This character is followed in memory by the remainder of the string.
AltitudeLengthThe length, in bytes, of the altitude string.
AltitudeBufferOffsetA byte offset of the first character of the altitude string. This character is followed in memory by the remainder of the string.
VolumeNameLengthThe length, in bytes, of the volume name.
VolumeNameBufferOffsetA byte offset of the first character of the volume name string. This character is followed in memory by the remainder of the string (for example, "\Device\HarddiskVolume1").
FilterNameLengthThe length, in bytes, of the minifilter name.
FilterNameBufferOffsetA byte offset of the first character of the minifilter name string. This character is followed in memory by the remainder of the string.
This structure must be aligned on a LONGLONG (8-byte) boundary. If a buffer contains two or more of these structures, the NextEntryOffset value in each entry, except the last, falls on an 8-byte boundary.
The content of all character string buffers referenced by this structure are Unicode.
INSTANCE_AGGREGATE_STANDARD_INFORMATION