integrity.h

Go to the documentation of this file.

/*
 * Copyright (c) 2020 Bitdefender
 * SPDX-License-Identifier: Apache-2.0
 */
#ifndef _INTEGRITY_H_
#define _INTEGRITY_H_

#include "introtypes.h"

typedef INTSTATUS
(*PFUNC_IntegrityViolationCallback)(
    _In_ void *IntegrityRegion
    );


typedef struct _INTEGRITY_REGION
{
    LIST_ENTRY                          Link;               
    QWORD                               Gva;                
    DWORD                               Length;             
    DWORD                               OriginalHash;       
    DWORD                               ModifiedHash;
    DWORD                               ViolationCount;
    INTRO_OBJECT_TYPE                   Type;
    void                                *Context;
    void                                *OriginalContent;
    PFUNC_IntegrityViolationCallback    Callback;
    BOOLEAN                             Deleted;
} INTEGRITY_REGION, *PINTEGRITY_REGION;


//
// API
//
INTSTATUS
IntIntegrityCheckAll(
    void
    );

INTSTATUS
IntIntegrityAddRegion(
    _In_ QWORD VirtualAddress,
    _In_ DWORD Length,
    _In_ INTRO_OBJECT_TYPE Type,
    _In_opt_ void *Context,
    _In_ PFUNC_IntegrityViolationCallback Callback,
    _In_ BOOLEAN CopyContent,
    _Out_ void **Descriptor
    );

INTSTATUS
IntIntegrityRecalculate(
    _In_ INTEGRITY_REGION *IntegrityRegion
    );

INTSTATUS
IntIntegrityRemoveRegion(
    _In_ void *Descriptor
    );

INTSTATUS
IntIntegrityDeleteRegion(
    _In_ void *Descriptor
    );

void
IntIntegrityDump(
    void
    );

INTSTATUS
IntIntegrityUninit(
    void
    );

#endif  // _INTEGRITY_H_