Download EaseFilter Filter Driver SDK Setup File Download EaseFilter Filter Driver SDK Zip File
The FltQueryInformationByName routine returns the requested information about a named file.
NTSTATUS FLTAPI FltQueryInformationByName( PFLT_FILTER Filter, PFLT_INSTANCE Instance, POBJECT_ATTRIBUTES ObjectAttributes, PIO_STATUS_BLOCK IoStatusBlock, PVOID FileInformation, ULONG Length, FILE_INFORMATION_CLASS FileInformationClass, PIO_DRIVER_CREATE_CONTEXT DriverContext );
Specifies the filter that is initiating this operation.
Specifies the instance towards which the create is targeted.
Instance is not necessarily the initiating instance. It must match the instance towards which the create is targeted, if this parameter is non-NULL. If Instance is non-NULL, the current filter's pre-create callback is not called. The pre-callbacks start with the filter below the current filter.
Specifies the attributes to be used for the file object (for example, its name, SECURITY_DESCRIPTOR, etc.).
The address of the caller's I/O status block.
A buffer to receive the requested information returned about the file.
The length, in bytes, of the FileInformation buffer.
Specifies the type of information that should be returned about the file.
A pointer to the driver's context space.
Returns STATUS_SUCCESS if the operation is successful. Otherwise, returns an appropriate NTSTATUS error code.
This function returns requested information about a file without opening the actual file. The information returned is determined by the FileInformationClass that is specified, and it is placed into the caller's FileInformation buffer.
If Instance is non-NULL then the create will be targeted to the specified instance, calling all filters below the current filter before sending the I/O down. If Instance is NULL, the I/O will be always sent to the top of the filter stack.