PsGetProcessStartKey - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
// ntddk.h

ULONGLONG PsGetProcessStartKey(
  [in] PEPROCESS Process
);
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (nf-ntddk-psgetprocessstartkey)

Description

This routine generates an identifier for a process which is unique across boot sessions.

Parameters

Process [in]

A pointer to the EPROCESS structure that represents the process. Drivers can use the PsGetCurrentProcess and ObReferenceObjectByHandle routines to obtain a pointer to the EPROCESS structure for a process.

Return value

Returns a ULONGLONG specifying a unique identifier for the provided process.

Remarks

Here is an example of how a driver might call this routine:

ULONGLONG ProcessStartKey;
ProcessStartKey = PsGetProcessStartKey(PsGetCurrentProcess());

The process start key is typically used to track or identify a process over time.

See also

View the official Windows Driver Kit DDI reference

Edit description on GitHub