The FltGetRequestorProcess routine returns a process pointer for the thread that requested a given I/O operation.
PEPROCESS FltGetRequestorProcess( _In_ PFLT_CALLBACK_DATA CallbackData );
Pointer to the callback data structure (FLT_CALLBACK_DATA) for the I/O operation.
FltGetRequestorProcess returns a process pointer for the thread that requested the I/O operation. If the operation is not associated with any thread, FltGetRequestorProcess returns NULL.
FltGetRequestorProcess returns a pointer to the process that the requesting thread is currently attached to. This process may or may not be the same process that created the thread.
|Header||fltkernel.h (include Fltkernel.h)|