struct _ETW_FILTER_HEADER { long FilterFlags;/* 0x0 4 */ struct _ETW_FILTER_PID* PidFilter;/* 0x4 4 */ struct _ETW_FILTER_STRING_TOKEN* ExeFilter;/* 0x8 4 */ struct _ETW_FILTER_STRING_TOKEN* PkgIdFilter;/* 0xc 4 */ struct _ETW_FILTER_STRING_TOKEN* PkgAppIdFilter;/* 0x10 4 */ struct _ETW_FILTER_STRING_TOKEN* ContainerFilter;/* 0x14 4 */ struct _ETW_PERFECT_HASH_FUNCTION* StackWalkIdFilter;/* 0x18 4 */ struct _ETW_FILTER_EVENT_NAME_DATA* StackWalkNameFilter;/* 0x1c 4 */ struct _EVENT_FILTER_LEVEL_KW* StackWalkLevelKwFilter;/* 0x20 4 */ struct _ETW_PERFECT_HASH_FUNCTION* EventIdFilter;/* 0x24 4 */ struct _ETW_PAYLOAD_FILTER* PayloadFilter;/* 0x28 4 */ struct _EVENT_FILTER_HEADER* ProviderSideFilter;/* 0x2c 4 */ struct _ETW_FILTER_EVENT_NAME_DATA* EventNameFilter;/* 0x30 4 */};size 52 (0x34)13 members0 holespadding 01 cacheline
Used in (1)