Edit

Share via

QUERY_ON_CREATE_USN_INFORMATION structure (ntifs.h)

  • Article

The QUERY_ON_CREATE_USN_INFORMATION structure is used to write file information when FltRequestFileInfoOnCreateCompletion is called with the QoCFileUsnInformation flag set in the InfoClassFlags parameter.

Syntax

typedef struct _QUERY_ON_CREATE_USN_INFORMATION {
  USN         Usn;
  FILE_ID_128 FileReferenceNumber;
} QUERY_ON_CREATE_USN_INFORMATION, *PQUERY_ON_CREATE_USN_INFORMATION;

Members

Usn

The USN (Update Sequence Number) for this file or directory.

FileReferenceNumber

The 128-bit file ID (aka ordinal number) of the file or directory.

Remarks

The system allocates this structure and the file system fills in the requested information, if supported, while it processes a file create. Filter Manager will eventually free the allocated structure.

Requirements

Requirement Value
Minimum supported client Windows 11, version 24H2
Header ntifs.h

See also

FltRequestFileInfoOnCreateCompletion

FltRetrieveFileInfoOnCreateCompletionEx