Display Filter Reference: EFS (pidl)
Protocol field name: efs
Versions: 1.0.0 to 4.0.8
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| efs | CbData | Unsigned integer (32 bits) | 1.0.0 to 4.0.8 |
| efs | DwCertEncodingType | Unsigned integer (32 bits) | 1.0.0 to 4.0.8 |
| efs | PbData | Unsigned integer (8 bits) | 1.0.0 to 4.0.8 |
| efs | CbData | Unsigned integer (32 bits) | 1.0.0 to 4.0.8 |
| efs | PbData | Unsigned integer (8 bits) | 1.0.0 to 4.0.8 |
| efs | FileName | Character string | 1.0.0 to 4.0.8 |
| efs | PvContext | Byte sequence | 1.0.0 to 4.0.8 |
| efs | FileName | Character string | 1.0.0 to 4.0.8 |
| efs | Reserved | Unsigned integer (32 bits) | 1.0.0 to 4.0.8 |
| efs | Filename | Character string | 1.0.0 to 4.0.8 |
| efs | FileName | Character string | 1.0.0 to 4.0.8 |
| efs | Flags | Unsigned integer (32 bits) | 1.0.0 to 4.0.8 |
| efs | PvContext | Byte sequence | 1.0.0 to 4.0.8 |
| efs | FileName | Character string | 1.0.0 to 4.0.8 |
| efs | PRecoveryAgents | Label | 1.0.0 to 4.0.8 |
| efs | FileName | Character string | 1.0.0 to 4.0.8 |
| efs | PUsers | Label | 1.0.0 to 4.0.8 |
| efs | PvContext | Byte sequence | 1.0.0 to 4.0.8 |
| efs | FileName | Character string | 1.0.0 to 4.0.8 |
| efs | PEncryptionCertificate | Label | 1.0.0 to 4.0.8 |
| efs | PvContext | Byte sequence | 1.0.0 to 4.0.8 |
| efs | PCertBlob | Label | 1.0.0 to 4.0.8 |
| efs | PUserSid | Label | 1.0.0 to 4.0.8 |
| efs | TotalLength | Unsigned integer (32 bits) | 1.0.0 to 4.0.8 |
| efs | CbTotalLength | Unsigned integer (32 bits) | 1.0.0 to 4.0.8 |
| efs | LpDisplayInformation | Character string | 1.0.0 to 4.0.8 |
| efs | PHash | Label | 1.0.0 to 4.0.8 |
| efs | PUserSid | Label | 1.0.0 to 4.0.8 |
| efs | NCert Hash | Unsigned integer (32 bits) | 1.0.0 to 4.0.8 |
| efs | PUsers | Label | 1.0.0 to 4.0.8 |
| efs | Operation | Unsigned integer (16 bits) | 1.0.0 to 4.0.8 |
| efs | Windows Error | Unsigned integer (32 bits) | 1.0.0 to 4.0.8 |