Retrieves the name of the process that opened the specified file handle.
char* GetHandleCreatorProcessName(int64 lHandleInfo);
LPWSTR GetHandleCreatorProcessName(LONG64 lHandleInfo);
This method can be called within certain events to retrieve the name of the process that opened the file handle specified by HandleInfo. The value to pass for HandleInfo should be obtained directly from the event. If the query fails, this method returns empty string.
Applications cannot use this method to retrieve information about remote processes accessing virtual drives shared on the network. Windows does not provide such information due to the nature of remote access.
Note: This method can only be called within events that expose a HandleInfo parameter, and must be called in the same thread that the event was originally fired on.
Error Handling (C++)
This method returns a String value; after it returns, call the GetLastErrorCode() method to obtain its result code; 0 indicates success, while a non-zero error code indicates that this method encountered an error during its execution. If an error occurs, the GetLastError() method can be called to retrieve the associated error message.