FileIo_V1_Name class
This class is the event type class for file I/O events.
The following syntax is simplified from MOF code.
[EventType{0, 32}, EventTypeName{"Name", "FileCreate"}]
class FileIo_V1_Name : FileIo
{
uint32 FileObject;
string FileName;
};
The FileIo_V1_Name class has these types of members:
The FileIo_V1_Name class has these properties.
-
FileName
-
-
Data type: string
-
Access type: Read-only
-
Qualifiers: WmiDataId(2), StringTermination("NullTerminated"), Format("w")
Full path to the file, not including the drive letter.
-
-
FileObject
-
-
Data type: uint32
-
Access type: Read-only
-
Qualifiers: WmiDataId(1), Pointer
Match the value of this pointer to the FileObject pointer value in a DiskIo_TypeGroup1 event to determine the type of I/O operation.
-
Windows Server 2003: To retrieve the drive letter for the file name path, use the FileObject property value to map to the corresponding DiskIo_TypeGroup1 event. From the DiskIo_TypeGroup1 event, use the DiskNumber and ByteOffset property values to map to the corresponding SystemConfig_LogDisk event (ByteOffset maps to StartOffset). The DriveLetterString property contains the drive letter.
Requirement | Value |
---|---|
Minimum supported client |
Windows XP [desktop apps only] |
Minimum supported server |
Windows Server 2003 [desktop apps only] |