Microsoft-Windows-FileInfoMinifilter

3 events across 1 channel

Event IDTitleChannel
1Operational
2Operational
3Operational

Event ID 1 —

Provider
Microsoft-Windows-FileInfoMinifilter
Channel
Operational
Task
fi:FileNameCreate

Fields #

NameDescription
FileObject Pointer
PathLength UInt16
Path UnicodeString

Event ID 2 —

Provider
Microsoft-Windows-FileInfoMinifilter
Channel
Operational
Task
fi:FileNameRundown

Fields #

NameDescription
FileObject Pointer
PathLength UInt16
Path UnicodeString

Event ID 3 —

Provider
Microsoft-Windows-FileInfoMinifilter
Channel
Operational
Task
fi:FileNameDelete

Fields #

NameDescription
FileObject Pointer
PathLength UInt16
Path UnicodeString