Selection criteria sub-block structure.
typedef struct _SUBBLOCK { ULONG entry_attribute_ID; /* The identifier of a field within a log entry. */ ULONG comparison_operator_ID; /* The identifier of a comparison operator. */ ULONG comparison_data_length; /* The length of the comparison data. */ PVOID comparison_data_ptr; struct _SUBBLOCK *next_subblock; } SUBBLOCK; typedef SUBBLOCK * PSUBBLOCK ;