Win32_ThreadTrace class

Artikel
05/31/2018

The Win32_ThreadTrace event WMI class is the base event class for thread events.

The following syntax is simplified from Managed Object Format (MOF) code and includes all of the inherited properties. Properties and methods are in alphabetic order, not MOF order.

Syntax

[AMENDMENT]
class Win32_ThreadTrace : Win32_SystemTrace
{
  uint8  SECURITY_DESCRIPTOR[];
  uint64 TIME_CREATED;
  uint32 ProcessID;
  uint32 ThreadID;
};

Members

The Win32_ThreadTrace class has these types of members:

Properties

Properties

The Win32_ThreadTrace class has these properties.

ProcessID

Data type: uint32
Access type: Read-only

Process identifier of the thread involved in the event.

SECURITY_DESCRIPTOR

Data type: uint8 array
Access type: Read-only

Descriptor used by the event provider to determine which users can receive the event. This property is inherited from __Event. For more information about constants used to set this security descriptor, see WMI Security Constants.

ThreadID

Data type: uint32
Access type: Read-only

Thread identifier of the thread involved in the event.

TIME_CREATED

Data type: uint64
Access type: Read-only

Unique value that indicates the time at which the event was generated. This is a 64-bit value that represents the number of 100-nanosecond intervals after January 1, 1601. The information is in the Coordinated Universal Times (UTC) format.

For more information about using uint64 values in scripts, see Scripting in WMI.

This property is inherited from __Event.

Remarks

The Win32_ThreadTrace class is derived from the Win32_SystemTrace class.

Requirements


Minimum supported client	Windows Vista
Minimum supported server	Windows Server 2008
Namespace	Root\CIMV2
MOF	Krnlprov.mof
DLL	Krnlprov.dll

Freigeben über