Edit

FltGetRequestorProcess function (fltkernel.h)

  • Article

The FltGetRequestorProcess routine returns a process pointer for the thread that requested a given I/O operation.

Syntax

PEPROCESS FLTAPI FltGetRequestorProcess(
  [in] PFLT_CALLBACK_DATA CallbackData
);

Parameters

[in] CallbackData

Pointer to the callback data structure (FLT_CALLBACK_DATA) for the I/O operation.

Return value

FltGetRequestorProcess returns a process pointer for the thread that requested the I/O operation. If the operation is not associated with any thread, FltGetRequestorProcess returns NULL.

Remarks

FltGetRequestorProcess returns a pointer to the process that the requesting thread is currently attached to. This process may or may not be the same process that created the thread.

Requirements

Requirement Value
Target Platform Universal
Header fltkernel.h (include Fltkernel.h)
Library FltMgr.lib
DLL Fltmgr.sys
IRQL <= DISPATCH_LEVEL

See also

FLT_CALLBACK_DATA

FltGetRequestorProcessId