Getting PEPROCESS from ProcessId

NTFSD
1

hi

How do I get a ProcessId’s (obtained from PsSetCreateProcessNotifyRoutine)
PEPROCESS, in an arbitrary context?

10x
Itai

2

BTW, is there way to kill the precess in CREATE_PROCESS_NOTIFY_ROUTINE?
Cary
----- Original Message -----
From:
To: “File Systems Developers”
Sent: Monday, July 15, 2002 10:56 AM
Subject: [ntfsd] Getting PEPROCESS from ProcessId

> hi
>
> How do I get a ProcessId’s (obtained from PsSetCreateProcessNotifyRoutine)
> PEPROCESS, in an arbitrary context?
>
> 10x
> Itai
>
> —
> You are currently subscribed to ntfsd as: xxxxx@Authenexgroup.com
> To unsubscribe send a blank email to %%email.unsub%%

3

PsLookupProcessByProcessId() . This question was answered multiple times on
this list, and responded multiple times.

Dan

----- Original Message -----
From:
To: “File Systems Developers”
Sent: Monday, July 15, 2002 8:56 PM
Subject: [ntfsd] Getting PEPROCESS from ProcessId

> hi
>
> How do I get a ProcessId’s (obtained from PsSetCreateProcessNotifyRoutine)
> PEPROCESS, in an arbitrary context?
>
> 10x
> Itai
>
> —
> You are currently subscribed to ntfsd as: xxxxx@rdsor.ro
> To unsubscribe send a blank email to %%email.unsub%%
>