FltGetRequestorProcessId function (fltkernel.h)

Article
02/22/2024

The FltGetRequestorProcessId routine returns the unique 32-bit process ID for the process associated with the thread that requested a given I/O operation.

Syntax

ULONG FLTAPI FltGetRequestorProcessId(
  [in] PFLT_CALLBACK_DATA CallbackData
);

Parameters

[in] CallbackData

Pointer to the callback data structure (FLT_CALLBACK_DATA) for the I/O operation.

Return value

FltGetRequestorProcessId returns the process ID for the process associated with the thread that originally requested the I/O operation. If the operation is not associated with any thread, FltGetRequestorProcessId returns zero.

Remarks

FltGetRequestorProcessId returns the process ID for the process that the requesting thread is currently attached to. This process may or may not be the same process that created the thread.

Requirements

Requirement	Value
Target Platform	Universal
Header	fltkernel.h (include Fltkernel.h)
Library	FltMgr.lib
DLL	Fltmgr.sys
IRQL	<= DISPATCH_LEVEL