QUERY_ON_CREATE_SECURITY_INFORMATION structure (ntifs.h)

The QUERY_ON_CREATE_SECURITY_INFORMATION structure is used to write file information when FltRequestSecurityInfoOnCreateCompletion is called in pre-create.

Syntax

typedef struct _QUERY_ON_CREATE_SECURITY_INFORMATION {
  ULONG                Reserved;
  ULONG                SecurityDescriptorSize;
  PSECURITY_DESCRIPTOR SecurityDescriptor;
} QUERY_ON_CREATE_SECURITY_INFORMATION, *PQUERY_ON_CREATE_SECURITY_INFORMATION;

Members

Reserved

This is undefined and reserved for future use.

SecurityDescriptorSize

Size, in bytes, of the SecurityDescriptor buffer.

SecurityDescriptor

Pointer to a buffer that receives a copy of the security descriptor for the specified object. The SECURITY_DESCRIPTOR structure is returned in self-relative format.

Remarks

The system allocates this structure and the file system fills in the requested information, if supported, while it processes a file create. Filter Manager will eventually free the allocated structure.

Requirements

Requirement	Value
Minimum supported client	Windows 11, version 24H2
Header	ntifs.h

See also

FltQuerySecurityObject

FltRequestFileInfoOnCreateCompletion

FltRetrieveFileInfoOnCreateCompletionEx