#pragma classflags("forceupdate") #pragma namespace("\\\\.\\root\\WMI") //ModuleName = NtfsLog (Init called in Function DriverEntry) [Dynamic, Description("Ntfs_NtfsLog"), guid("{b2fc00c4-2941-4d11-983b-b16e8aa4e25d}"), locale("MS\\0x409")] class NtfsLog : EventTrace { uint32 Flags; };