#ifndef _NTPFAPI_H

/**
 * The PFS_PRIVATE_PAGE_SOURCE structure identifies a private-page source and its process or session metadata.
 */
typedef struct _PFS_PRIVATE_PAGE_SOURCE
{
    PFS_PRIVATE_PAGE_SOURCE_TYPE Type;          // Source category selecting kernel, session or process interpretation.
    union
    {
        ULONG SessionId;                        // Session identifier for a session source.
        ULONG ProcessId;                        // Process identifier for a process source.
    };
    ULONG ImagePathHash;                        // Hash identifying the source image path.
    ULONG_PTR UniqueProcessHash;                // Hash derived from the process identifier and creation time.
} PFS_PRIVATE_PAGE_SOURCE, *PPFS_PRIVATE_PAGE_SOURCE;

#endif
View code on GitHub