// ntifs.h

typedef struct _QUERY_ON_CREATE_USN_INFORMATION {
  USN         Usn;
  FILE_ID_128 FileReferenceNumber;
} QUERY_ON_CREATE_USN_INFORMATION, *PQUERY_ON_CREATE_USN_INFORMATION;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ns-ntifs-query_on_create_usn_information)

Description

The QUERY_ON_CREATE_USN_INFORMATION structure is used to write file information when FltRequestFileInfoOnCreateCompletion is called with the QoCFileUsnInformation flag set in the InfoClassFlags parameter.

Members

`Usn`

The USN (Update Sequence Number) for this file or directory.

`FileReferenceNumber`

The 128-bit file ID (aka ordinal number) of the file or directory.

Remarks

The system allocates this structure and the file system fills in the requested information, if supported, while it processes a file create. Filter Manager will eventually free the allocated structure.

QUERY_ON_CREATE_USN_INFORMATION - NtDoc