WUtils.com

FileOperation, ROOT\WMI

Class | Methods | Properties (29) | Qualifiers (5) | Instances | Namespaces (2)
Samples: VB Script | C# | VB.Net | Search on:Microsoft

Description

File Trace Event

FileOperation properties

FileOperation has 29 properties (28 Local, 1 Derived)

NameOriginCIMType
AccessTokenFileOperation19 [uint32]
CreateOnExistingFileOperation17 [uint8]
FileNameFileOperation8 [string]
FileObjectFileOperation21 [uint64]
FlagsMSNT_FileBaseTrace_Set119 [uint32]
IsDirectoryFileOperation17 [uint8]
IsFastIOFileOperation17 [uint8]
IsPagingIOFileOperation17 [uint8]
LastAccessTimeFileOperation20 [sint64]
MinorOperationFileOperation17 [uint8]
OperationFileOperation17 [uint8]
OperationalParametersFileOperation17 [uint8]
ParametersLengthFileOperation19 [uint32]
PreviousValueFileOperation17 [uint8]
PreviousValueLengthFileOperation19 [uint32]
ProcessCreateTimeFileOperation20 [sint64]
ProcessIdFileOperation19 [uint32]
ResultDataFileOperation17 [uint8]
ResultLengthFileOperation19 [uint32]
SequenceNumberFileOperation19 [uint32]
SessionIdFileOperation19 [uint32]
SidLengthFileOperation19 [uint32]
StartTimeFileOperation20 [sint64]
StatusFileOperation19 [uint32]
UserSIDFileOperation13 [object]
VolumeDosNameFileOperation8 [string]
VolumeGuidNameFileOperation8 [string]
VolumeNameFileOperation8 [string]
WindowStationFileOperation21 [uint64]

Detailed description of FileOperation properties

Local properties (28) of FileOperation class

…
▲ AccessToken property
CIMTYPE'uint32'
Description'Acess token address'
pointerTrue
readTrue
WmiDataId16
AccessToken property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ CreateOnExisting property
CIMTYPE'uint8'
Description'Create called on existing file'
readTrue
ValueMap['0', '1', '2']
Values['False', 'True', 'NA']
WmiDataId8
CreateOnExisting property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ FileName property
CIMTYPE'string'
Description'File Name'
format'w'
readTrue
StringTermination'NullTerminated'
WmiDataId25
FileName property is in 25 classes of ROOT\WMI and in 23 namespaces
…
▲ FileObject property
CIMTYPE'uint64'
Description'File Object'
format'x'
pointerTrue
readTrue
WmiDataId12
FileObject property is in 28 classes of ROOT\WMI and in 2 namespaces
…
▲ IsDirectory property
CIMTYPE'uint8'
Description'IsDirectory'
readTrue
ValueMap['0', '1', '2']
Values['False', 'True', 'NA']
WmiDataId7
IsDirectory property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ IsFastIO property
CIMTYPE'uint8'
Description'Is this a fast IO operation'
readTrue
WmiDataId6
IsFastIO property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ IsPagingIO property
CIMTYPE'uint8'
Description'Is this a paging operation'
readTrue
WmiDataId5
IsPagingIO property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ LastAccessTime property
CIMTYPE'sint64'
Description'File last access time'
readTrue
WmiDataId13
LastAccessTime property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ MinorOperation property
CIMTYPE'uint8'
Description'Minor operation'
readTrue
WmiDataId3
MinorOperation property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ Operation property
CIMTYPE'uint8'
Description'Operation'
readTrue
ValueMap['0', '1', '2', '3', '4', '5', '6', '7', '8', '9', '15', '16', '17', '18', '19', '20', '21', '22', '23', '24', '25', '26', '27', '28', '29', '30', '31', '32', '33', '34', '35', '36', '37', '38', '39', '40', '41', '42', '43', '44', '45', '46', '47', '48', '49']
Values['NORMALIZE_NAME_COMPONENT', 'GENERATE_FILE_NAME', 'VOLUME_DISMOUNT', 'VOLUME_MOUNT', 'MDL_WRITE_COMPLETE', 'PREPARE_MDL_WRITE', 'MDL_READ_COMPLETE', 'MDL_READ', 'NETWORK_QUERY_OPEN', 'FAST_IO_CHECK_IF_POSSIBLE', 'NOTIFY_STREAM_FILE_OBJECT', 'RELEASE_FOR_CC_FLUSH', 'ACQUIRE_FOR_CC_FLUSH', 'RELEASE_FOR_MOD_WRITE', 'ACQUIRE_FOR_MOD_WRITE', 'RELEASE_FOR_SECTION_SYNCHRONIZATION', 'ACQUIRE_FOR_SECTION_SYNCHRONIZATION', 'CREATE', 'CREATE_NAMED_PIPE', 'CLOSE', 'READ', 'WRITE', 'QUERY_INFORMATION', 'SET_INFORMATION', 'QUERY_EA', 'SET_EA', 'FLUSH_BUFFERS', 'QUERY_VOLUME_INFORMATION', 'SET_VOLUME_INFORMATION', 'DIRECTORY_CONTROL', 'FILE_SYSTEM_CONTROL', 'DEVICE_CONTROL', 'INTERNAL_DEVICE_CONTROL', 'SHUTDOWN', 'LOCK_CONTROL', 'CLEANUP', 'CREATE_MAILSLOT', 'QUERY_SECURITY', 'SET_SECURITY', 'POWER', 'SYSTEM_CONTROL', 'DEVICE_CHANGE', 'QUERY_QUOTA', 'SET_QUOTA', 'PNP']
WmiDataId2
Operation property is in 14 classes of ROOT\WMI and in 142 namespaces
…
▲ OperationalParameters property
CIMTYPE'uint8'
description'Operational Parameters'
readTrue
WmiDataId22
WmiSizeIs'ParametersLength'
OperationalParameters property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ ParametersLength property
CIMTYPE'uint32'
Description'Parameters Data Length'
readTrue
WmiDataId18
ParametersLength property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ PreviousValue property
CIMTYPE'uint8'
description'Previous Value'
readTrue
WmiDataId24
WmiSizeIs'PreviousValueLength'
PreviousValue property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ PreviousValueLength property
CIMTYPE'uint32'
Description'Previous Value Length'
readTrue
WmiDataId20
PreviousValueLength property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ ProcessCreateTime property
CIMTYPE'sint64'
Description'The time the process was created'
readTrue
WmiDataId11
ProcessCreateTime property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ ProcessId property
CIMTYPE'uint32'
Description'Id of the operation's process'
readTrue
WmiDataId10
ProcessId property is in 41 classes of ROOT\WMI and in 18 namespaces
…
▲ ResultData property
CIMTYPE'uint8'
description'Query Result Data'
readTrue
WmiDataId23
WmiSizeIs'ResultLength'
ResultData property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ ResultLength property
CIMTYPE'uint32'
Description'Result Data Length'
readTrue
WmiDataId19
ResultLength property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ SequenceNumber property
CIMTYPE'uint32'
Description'SequenceNumber'
readTrue
WmiDataId4
SequenceNumber property is in 1038 classes of ROOT\WMI and in 142 namespaces
…
▲ SessionId property
CIMTYPE'uint32'
Description'Session Id'
readTrue
WmiDataId14
SessionId property is in 68 classes of ROOT\WMI and in 16 namespaces
…
▲ SidLength property
CIMTYPE'uint32'
Description'User Sid Data Length'
readTrue
WmiDataId17
SidLength property is in 2 classes of ROOT\WMI and in 142 namespaces
…
▲ StartTime property
CIMTYPE'sint64'
Description'The time the operation started'
readTrue
WmiDataId9
StartTime property is in 8 classes of ROOT\WMI and in 24 namespaces
…
▲ Status property
CIMTYPE'uint32'
Description'Status'
format'x'
readTrue
WmiDataId1
Status property is in 45 classes of ROOT\WMI and in 42 namespaces
…
▲ UserSID property
CIMTYPE'object'
Description'User Sid'
extension'Sid'
readTrue
WmiDataId21
UserSID property is in 8 classes of ROOT\WMI and in 4 namespaces
…
▲ VolumeDosName property
CIMTYPE'string'
Description'Volume Dos Name'
format'w'
readTrue
StringTermination'NullTerminated'
WmiDataId26
VolumeDosName property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ VolumeGuidName property
CIMTYPE'string'
Description'Volume Guid Name'
format'w'
readTrue
StringTermination'NullTerminated'
WmiDataId27
VolumeGuidName property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces
…
▲ VolumeName property
CIMTYPE'string'
Description'Volume Name'
format'w'
readTrue
StringTermination'NullTerminated'
WmiDataId28
VolumeName property is in 1 class (FileOperation) of ROOT\WMI and in 6 namespaces
…
▲ WindowStation property
CIMTYPE'uint64'
Description'Window Station'
pointerTrue
readTrue
WmiDataId15
WindowStation property is in 1 class (FileOperation) of ROOT\WMI and in 2 namespaces

Derived properties (1) of FileOperation class

…
▲ Flags property
CIMTYPE'uint32'
Flags property is in 2953 classes of ROOT\WMI and in 142 namespaces

FileOperation Qualifiers

…
NameValueToInstanceToSubclassOverridableAmendedLocal
Description'File Trace Event'✗✗✓✓✓
dynamicTrue✓✗✓✗✓
EventType[0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 236, 237, 238, 239, 240, 241, 242, 243, 249, 250, 251, 252, 253, 254, 255]✗✗✓✗✓
EventTypeName'FileTrace'✗✗✓✗✓
LOCALE1033✗✗✓✓✓

FileOperation System properties

…
NameValueOriginCIMTypeLocalArray
__PATH'\\.\ROOT\WMI:FileOperation'___SYSTEM8✗✗
__NAMESPACE'ROOT\WMI'___SYSTEM8✗✗
__SERVER'.'___SYSTEM8✗✗
__DERIVATION['FileTrace', 'MSNT_FileBaseTrace_Set1', 'EventTrace']___SYSTEM8✗✓
__PROPERTY_COUNT29___SYSTEM3✗✗
__RELPATH'FileOperation'___SYSTEM8✗✗
__DYNASTY'EventTrace'___SYSTEM8✗✗
__SUPERCLASS'FileTrace'___SYSTEM8✗✗
__CLASS'FileOperation'___SYSTEM8✗✗
__GENUS1___SYSTEM3✗✗

Similar Classes to FileOperation

Number of classes:16
…
Class nameChildsPropertiesMethodsClass
Instances		Child
Instances		AbstractSingleton
__ClassOperationEvent330--✓-
__InstanceOperationEvent430--✓-
__NamespaceOperationEvent330--✓-
database_agent_local_operation_begin090----
database_agent_local_operation_end090----
FileIo_PathOperation080----
modify_file_operation0120----
MSiSCSI_LB_Operations0211---
MSiSCSI_ManagementOperations021----
MSNdis_StatusOperationalStatus060--✓-
progress_report_online_index_operation0170----
WMI_Tracing_Client_Operations010----
XeSqlPkg_database_agent_local_operation_begin110----
XeSqlPkg_database_agent_local_operation_end110----
XeSqlPkg_modify_file_operation110----
XeSqlPkg_progress_report_online_index_operation110----
comments powered by Disqus
WUtils.com