#ifndef _NTPSAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)
/**
* The PROCESS_HANDLE_TRACING_ENABLE_EX structure extends PROCESS_HANDLE_TRACING_ENABLE to include the total number of slots.
*/
typedef struct _PROCESS_HANDLE_TRACING_ENABLE_EX
{
ULONG Flags; // Flags that control handle tracing.
ULONG TotalSlots; // Total number of handle tracing slots.
} PROCESS_HANDLE_TRACING_ENABLE_EX, *PPROCESS_HANDLE_TRACING_ENABLE_EX;
View code on GitHub
This structure enables handle tracing for the process.
NtSetInformationProcess
with ProcessHandleTracing
(32)This value is unused.
The number of slots to allocate for storing handle tracing entries. The system rounds the specified value up to the closest power of two between 0x80 and 0x20000. Specifying a zero value defaults it to 0x1000.