_ETW_FILTER_HEADER

Metadatacopy
struct _ETW_FILTER_HEADER {
    long FilterFlags;/* 0x0  4 */
    /* 4 bytes padding */
    struct _ETW_FILTER_PID* PidFilter;/* 0x8  8 */
    struct _ETW_FILTER_STRING_TOKEN* ExeFilter;/* 0x10  8 */
    struct _ETW_FILTER_STRING_TOKEN* PkgIdFilter;/* 0x18  8 */
    struct _ETW_FILTER_STRING_TOKEN* PkgAppIdFilter;/* 0x20  8 */
    struct _ETW_FILTER_STRING_TOKEN* ContainerFilter;/* 0x28  8 */
    struct _ETW_PERFECT_HASH_FUNCTION* StackWalkIdFilter;/* 0x30  8 */
    struct _ETW_FILTER_EVENT_NAME_DATA* StackWalkNameFilter;/* 0x38  8 */
    /* ── cacheline 1 boundary (64 bytes) ── */
    struct _EVENT_FILTER_LEVEL_KW* StackWalkLevelKwFilter;/* 0x40  8 */
    struct _ETW_PERFECT_HASH_FUNCTION* EventIdFilter;/* 0x48  8 */
    struct _ETW_PAYLOAD_FILTER* PayloadFilter;/* 0x50  8 */
    struct _EVENT_FILTER_HEADER* ProviderSideFilter;/* 0x58  8 */
    struct _ETW_FILTER_EVENT_NAME_DATA* EventNameFilter;/* 0x60  8 */
};