FltAcknowledgeEcp function (fltkernel.h)

Article
02/22/2024

The FltAcknowledgeEcp routine is used to mark an extra create parameter context structure (ECP) as acknowledged.

Syntax

VOID FLTAPI FltAcknowledgeEcp(
  [in] PFLT_FILTER Filter,
  [in] PVOID       EcpContext
);

Parameters

[in] Filter

Opaque filter pointer for the minifilter driver. This pointer uniquely identifies the minifilter driver and remains constant as long as the minifilter driver is loaded.

[in] EcpContext

Pointer to the ECP to mark as acknowledged.

Return value

None

Remarks

This routine is available in Windows Vista and later.

The ECP pointed to by the EcpContext parameter is marked as "acknowledged" by this routine. This acknowledgment could indicate a number of things, including whether the ECP has been looked at, used, processed, and so on. Note that the FltIsEcpAcknowledged routine can be used to determine if a particular ECP has been marked as acknowledged.

Requirements

Requirement	Value
Target Platform	Universal
Header	fltkernel.h (include Fltkernel.h)
Library	FltMgr.lib
IRQL	<= APC_LEVEL