PF_ACCESS_TRACING_CONTROL - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
#ifndef _NTPFAPI_H

/**
 * The PF_ACCESS_TRACING_CONTROL structure controls access tracing for a Superfetch partition.
 */
typedef struct _PF_ACCESS_TRACING_CONTROL
{
    ULONG Version;                              // Request version: PF_ACCESS_TRACING_CONTROL_VERSION (3).
    ULONG Type;                                 // Operation: 0 enables selected tracing flags; 1 removes them.
    ULONG Flags;                                // Selected tracing flags; valid mask 0x3.
    ULONG Reserved;                             // Reserved field; initialize to zero and do not interpret on output.
    HANDLE PartitionHandle;                     // Input handle identifying the tracing partition.
    HANDLE TraceHandle;                         // Must be NULL on input for Type 0; receives the trace handle on success.
} PF_ACCESS_TRACING_CONTROL, *PPF_ACCESS_TRACING_CONTROL;

#endif

View code on GitHub

NtDoc

No description available.