Type__ERequestHeaderFlags

_ERequestHeaderFlags enum

Summary

Defines possible values for the REQUEST_HEADER.Flags field.

Definition

typedef enum _ERequestHeaderFlags {
    REQUEST_FLAG_EMULATED = 1,
    REQUEST_FLAG_DATA_STRIPPED = 2,
    REQUEST_FLAG_ADMIN = 4,
    REQUEST_FLAG_IMPERSONATED = 8,
    REQUEST_FLAG_IMPERSONATED_ADMIN = 16,
    REQUEST_FLAG_NEXT_AVAILABLE = 32,
    REQUEST_FLAG_PAGED = 128,
    REQUEST_FLAG_NONPAGED = 256,
} ERequestHeaderFlags, *PERequestHeaderFlags;

Values

REQUEST_FLAG_EMULATED

The request was not genuinely generated by the IRPMon driver. It was created artificially (e.g. to simulate creation of currently running processes or currently existing devices and drivers).

REQUEST_FLAG_DATA_STRIPPED

The request was stripped of some of its data because their size exceeded the maximum limit.

REQUEST_FLAG_ADMIN

The request was generated on behalf of an user with administrative rights.

REQUEST_FLAG_IMPERSONATED

The request was generated on behalf of an impersonating thread.

REQUEST_FLAG_IMPERSONATED_ADMIN

The request was generated on behalf of an impersonated user with administrative rights.

REQUEST_FLAG_NEXT_AVAILABLE

The request is immediately followed by another one.

REQUEST_FLAG_PAGED

The request data was allocated from paged pool.

REQUEST_FLAG_NONPAGED

The request data was allocated from nonpaged pool.

See also

• REQUEST_HEADER.Flags

Requirements

Header	general-types.h