Events
Nov 19, 11 PM - Nov 21, 11 PM
Gain the competitive edge you need with powerful AI and Cloud solutions by attending Microsoft Ignite online.
Register nowThis browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
This class is the event type class for file I/O events.
The following syntax is simplified from MOF code.
[EventType{0, 32}, EventTypeName{"Name", "FileCreate"}]
class FileIo_V1_Name : FileIo
{
uint32 FileObject;
string FileName;
};
The FileIo_V1_Name class has these types of members:
The FileIo_V1_Name class has these properties.
FileName
Data type: string
Access type: Read-only
Qualifiers: WmiDataId(2), StringTermination("NullTerminated"), Format("w")
Full path to the file, not including the drive letter.
FileObject
Data type: uint32
Access type: Read-only
Qualifiers: WmiDataId(1), Pointer
Match the value of this pointer to the FileObject pointer value in a DiskIo_TypeGroup1 event to determine the type of I/O operation.
Windows Server 2003: To retrieve the drive letter for the file name path, use the FileObject property value to map to the corresponding DiskIo_TypeGroup1 event. From the DiskIo_TypeGroup1 event, use the DiskNumber and ByteOffset property values to map to the corresponding SystemConfig_LogDisk event (ByteOffset maps to StartOffset). The DriveLetterString property contains the drive letter.
Requirement | Value |
---|---|
Minimum supported client |
Windows XP [desktop apps only] |
Minimum supported server |
Windows Server 2003 [desktop apps only] |
Events
Nov 19, 11 PM - Nov 21, 11 PM
Gain the competitive edge you need with powerful AI and Cloud solutions by attending Microsoft Ignite online.
Register now