Geoff Chappell, Software Analyst
The public symbol file NTKRPAMP.PDB for the original release of Windows 10 tells that the kernel is built with the PF.H header at
d:\th\minkernel\ntos\inc
and draws from it the following type definitions:
| Line Number | Type |
|---|---|
| 70 | struct _PF_KERNEL_GLOBALS |
| 413 | enum _PF_FILE_ACCESS_TYPE |
The header PF.H is not known in any Device Driver Kit (DDK) or Windows Driver Kit (WDK).