_ETW_FILTER_HEADER

//0x30 bytes (sizeof) struct _ETW_FILTER_HEADER { LONG FilterFlags; //0x0 struct _ETW_FILTER_PID* PidFilter; //0x4 struct _ETW_FILTER_STRING_TOKEN* ExeFilter; //0x8 struct _ETW_FILTER_STRING_TOKEN* PkgIdFilter; //0xc struct _ETW_FILTER_STRING_TOKEN* PkgAppIdFilter; //0x10 struct _ETW_PERFECT_HASH_FUNCTION* StackWalkIdFilter; //0x14 struct _ETW_FILTER_EVENT_NAME_DATA* StackWalkNameFilter; //0x18 struct _EVENT_FILTER_LEVEL_KW* StackWalkLevelKwFilter; //0x1c struct _ETW_PERFECT_HASH_FUNCTION* EventIdFilter; //0x20 struct _ETW_PAYLOAD_FILTER* PayloadFilter; //0x24 struct _EVENT_FILTER_HEADER* ProviderSideFilter; //0x28 struct _ETW_FILTER_EVENT_NAME_DATA* EventNameFilter; //0x2c };