Edit

Share via

USN_RECORD_V3 structure (ntifs.h)

  • Article

The USN_RECORD_V3 structure contains the information for an update sequence number (USN) change journal version 3.0 record. The version 2.0 record is defined by the USN_RECORD_V2 structure (also called USN_RECORD structure). See USN_RECORD_V3 structure (winioctl.h) for details.

Syntax

typedef struct {
  ULONG         RecordLength;
  USHORT        MajorVersion;
  USHORT        MinorVersion;
  FILE_ID_128   FileReferenceNumber;
  FILE_ID_128   ParentFileReferenceNumber;
  USN           Usn;
  LARGE_INTEGER TimeStamp;
  ULONG         Reason;
  ULONG         SourceInfo;
  ULONG         SecurityId;
  ULONG         FileAttributes;
  USHORT        FileNameLength;
  USHORT        FileNameOffset;
  WCHAR         FileName[1];
} USN_RECORD_V3, *PUSN_RECORD_V3;

Members

RecordLength

MajorVersion

MinorVersion

FileReferenceNumber

ParentFileReferenceNumber

Usn

TimeStamp

Reason

SourceInfo

SecurityId

FileAttributes

FileNameLength

FileNameOffset

FileName[1]

Requirements

Requirement Value
Minimum supported client Windows 8
Header ntifs.h

See also

FSCTL_READ_USN_JOURNAL