// wdm.h
typedef enum _IO_CONTAINER_NOTIFICATION_CLASS {
IoSessionStateNotification,
IoMaxContainerNotificationClass
} IO_CONTAINER_NOTIFICATION_CLASS;
View the official Windows Driver Kit DDI referenceNo description available.
The IO_CONTAINER_NOTIFICATION_CLASS enumeration contains constants that indicate the classes of events for which a kernel-mode driver can register to receive notifications.
IoSessionStateNotificationSession state notifications. The driver uses this enumeration constant to request notifications about changes in the state of user sessions that the driver is interested in.
IoMaxContainerNotificationClassSpecifies the maximum value in this enumeration type.
To register for notifications, a driver calls the IoRegisterContainerNotification routine and sets this routine's NotificationClass parameter to an IO_CONTAINER_NOTIFICATION_CLASS constant (other than IoMaxContainerNotificationClass). Currently, IoRegisterContainerNotification supports only NotificationClass = IoSessionStateNotification.
IoRegisterContainerNotification