#include <rpc_eventlog.h>
変数 | |
| uint32 | length |
| uint32 | reserved1 |
| uint32 | record_number |
| uint32 | time_generated |
| uint32 | time_written |
| uint32 | event_id |
| uint16 | event_type |
| uint16 | num_strings |
| uint16 | event_category |
| uint16 | reserved2 |
| uint32 | closing_record_number |
| uint32 | string_offset |
| uint32 | user_sid_length |
| uint32 | user_sid_offset |
| uint32 | data_length |
| uint32 | data_offset |
rpc_eventlog.h の 139 行で定義されています。
| uint32 length |
| uint32 reserved1 |
| uint32 record_number |
rpc_eventlog.h の 142 行で定義されています。
参照元 eventlog_io_r_read_eventlog()・get_eventlog_record()・parse_logentry().
| uint32 time_generated |
| uint32 time_written |
| uint32 event_id |
| uint16 event_type |
| uint16 num_strings |
| uint16 event_category |
| uint16 reserved2 |
| uint32 closing_record_number |
| uint32 string_offset |
| uint32 user_sid_length |
| uint32 user_sid_offset |
| uint32 data_length |
| uint32 data_offset |
1.4.7