0byt3m1n1
Path:
C:
/
Windows
/
System32
/
wbem
/
[
Home
]
File: ntfs.mof
#pragma classflags("forceupdate") #pragma namespace("\\\\.\\root\\WMI") //ModuleName = NtfsLog (Init called in Function DriverEntry) [Dynamic, Description("Ntfs_NtfsLog"), guid("{b2fc00c4-2941-4d11-983b-b16e8aa4e25d}"), locale("MS\\0x409")] class NtfsLog : EventTrace { uint32 Flags; };