Edit

Share via

FileIo_V1_Name class

  • Article

This class is the event type class for file I/O events.

The following syntax is simplified from MOF code.

Syntax

[EventType{0, 32}, EventTypeName{"Name", "FileCreate"}]
class FileIo_V1_Name : FileIo
{
  uint32 FileObject;
  string FileName;
};

Members

The FileIo_V1_Name class has these types of members:

Properties

The FileIo_V1_Name class has these properties.

FileName

Data type: string

Access type: Read-only

Qualifiers: WmiDataId(2), StringTermination("NullTerminated"), Format("w")

Full path to the file, not including the drive letter.

FileObject

Data type: uint32

Access type: Read-only

Qualifiers: WmiDataId(1), Pointer

Match the value of this pointer to the FileObject pointer value in a DiskIo_TypeGroup1 event to determine the type of I/O operation.

Remarks

Windows Server 2003: To retrieve the drive letter for the file name path, use the FileObject property value to map to the corresponding DiskIo_TypeGroup1 event. From the DiskIo_TypeGroup1 event, use the DiskNumber and ByteOffset property values to map to the corresponding SystemConfig_LogDisk event (ByteOffset maps to StartOffset). The DriveLetterString property contains the drive letter.

Requirements

Requirement Value
Minimum supported client
 Windows XP [desktop apps only]
Minimum supported server
 Windows Server 2003 [desktop apps only]

See also

FileIo