Struct FileIoEvent 

pub struct FileIoEvent {
    pub operation: FileIoOperation,
    pub process_id: Option<ProcessId>,
    pub file_object: Option<u64>,
    pub irp_ptr: Option<u64>,
    pub file_key: Option<u64>,
    pub open_path: Option<String>,
    pub create_options: Option<u32>,
    pub file_attributes: Option<u32>,
    pub share_access: Option<u32>,
}

Typed representation of a decoded File I/O event.

Fields

operation: FileIoOperation

process_id: Option<ProcessId>

file_object: Option<u64>

irp_ptr: Option<u64>

file_key: Option<u64>

open_path: Option<String>

create_options: Option<u32>

file_attributes: Option<u32>

share_access: Option<u32>

Trait Implementations

impl Clone for FileIoEvent

fn clone(&self) -> FileIoEvent

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FileIoEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.