INSTANCE_PARTIAL_INFORMATION - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
// fltuserstructures.h

typedef struct _INSTANCE_PARTIAL_INFORMATION {
  ULONG  NextEntryOffset;
  USHORT InstanceNameLength;
  USHORT InstanceNameBufferOffset;
  USHORT AltitudeLength;
  USHORT AltitudeBufferOffset;
} INSTANCE_PARTIAL_INFORMATION, *PINSTANCE_PARTIAL_INFORMATION;

View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Windows Driver Kit DDI reference (ns-fltuserstructures-_instance_partial_information)

_INSTANCE_PARTIAL_INFORMATION structure

Description

The INSTANCE_PARTIAL_INFORMATION structure contains partial information for a minifilter instance.

Members

NextEntryOffset

Byte offset of the next INSTANCE_PARTIAL_INFORMATION entry, if multiple entries are present in a buffer. This member is zero if no other entries follow this one.

InstanceNameLength

Length, in bytes, of the instance name.

InstanceNameBufferOffset

Byte offset of the first character of the instance name string. This character is followed in memory by the remainder of the string.

AltitudeLength

Length, in bytes, of the altitude string for the instance.

AltitudeBufferOffset

Byte offset of the first character of the altitude string. This character is followed in memory by the remainder of the string.

Remarks

This structure must be aligned on a LONGLONG (8-byte) boundary. If a buffer contains two or more of these structures, the NextEntryOffset value in each entry, except the last, falls on an 8-byte boundary.

See also

FilterAttachAtAltitude

FilterInstanceFindClose

FilterInstanceFindFirst

FilterInstanceFindNext

FilterInstanceGetInformation

FilterVolumeInstanceFindClose

FilterVolumeInstanceFindFirst

FilterVolumeInstanceFindNext

INSTANCE_AGGREGATE_STANDARD_INFORMATION

INSTANCE_BASIC_INFORMATION

INSTANCE_FULL_INFORMATION