RKF_BYPASS_ECP_CONTEXT - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
// ntifs.h

typedef struct _RKF_BYPASS_ECP_CONTEXT {
  INT Reserved;
  INT Version;
} RKF_BYPASS_ECP_CONTEXT, *PRKF_BYPASS_ECP_CONTEXT;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Windows Driver Kit DDI reference (ns-ntifs-rkf_bypass_ecp_context)

Description

The RKF_BYPASS_ECP_CONTEXT structure contains the extra create parameter (ECP) context for the Resume Key Filter (RKF) for an RKF bypass handle.

Members

Reserved

Reserved for future use. Must be set to zero.

Version

The version of the ECP context (this structure). Must be initialized to zero.

Remarks

The value GUID_ECP_RKF_BYPASS is used when calling support routines such as FltAllocateExtraCreateParameter and FsRtlRemoveExtraCreateParameter.

See Introduction to extra create parameters for more information.