Edit

Share via


IFileActivity Interface

Definition

public interface IFileActivity
type IFileActivity = interface
Public Interface IFileActivity
Derived

Properties

ErrorCode

Gets the NTSTATUS that is returned during completion of the IO request.

FileName
FileObject

Gets the address in virtual memory on the machine that logged the trace where the File Object was stored.

IssuingProcess

Gets the process that made the IO request.

IssuingThread

Gets the thread that made the IO request.

LoggingProcess

Gets the process that fired the underlying ETW events for this data.

LoggingThread

Gets the thread that fired the underlying ETW events for this data.

PacketObject

Gets the address in virtual memory on the machine that logged the trace where the I/O Request Packet (IRP) was stored.

Path
Stack

Gets the Stack associated with the IO request.

StartTime
StopTime

Applies to