Bitdefender Hypervisor Memory Introspection
|
#include <aghcall.h>
Data Fields | |
unsigned int | Version |
Structure version. Check out AGENT_COMMAND_VERSION. More... | |
unsigned int | Type |
The agent type. One of AGENT_TYPE. More... | |
unsigned int | Pid |
The process PID from which to start a process agent. More... | |
unsigned int | Synched |
Always FALSE for now. Will not wait for the process agent to finish. More... | |
unsigned int | Size |
The size of the agent. More... | |
unsigned int | Flags |
Note used. More... | |
unsigned long long | Pointer |
A pointer to the agent contents in guest memory. More... | |
unsigned int | Agid |
Internal use; IT'S NOT the agent tag. More... | |
char | Name [AGENT_MAX_AGENT_NAME_LENGTH] |
The agent name. This will be the file name or the process name. More... | |
char | Args [AGENT_MAX_COMMAND_LINE_LENGTH] |
Command line arguments used by the injected process. It is limited to AGENT_MAX_COMMAND_LINE_LENGTH bytes. More... | |
Structure used by the introbootdrv to request a command from Introcore. The first hypercall issued by introbootdrv will request this data, which tells it what to do.
unsigned int _AGENT_COMMAND::Agid |
Internal use; IT'S NOT the agent tag.
Definition at line 76 of file aghcall.h.
Referenced by IntWinAgentHandleDriverVmcall().
char _AGENT_COMMAND::Args[AGENT_MAX_COMMAND_LINE_LENGTH] |
Command line arguments used by the injected process. It is limited to AGENT_MAX_COMMAND_LINE_LENGTH bytes.
Definition at line 82 of file aghcall.h.
Referenced by IntWinAgentHandleDriverVmcall().
unsigned int _AGENT_COMMAND::Flags |
char _AGENT_COMMAND::Name[AGENT_MAX_AGENT_NAME_LENGTH] |
The agent name. This will be the file name or the process name.
Definition at line 79 of file aghcall.h.
Referenced by IntWinAgentHandleDriverVmcall().
unsigned int _AGENT_COMMAND::Pid |
The process PID from which to start a process agent.
Definition at line 71 of file aghcall.h.
Referenced by IntWinAgentHandleDriverVmcall().
unsigned long long _AGENT_COMMAND::Pointer |
A pointer to the agent contents in guest memory.
Definition at line 75 of file aghcall.h.
Referenced by IntWinAgentHandleDriverVmcall().
unsigned int _AGENT_COMMAND::Size |
The size of the agent.
Definition at line 73 of file aghcall.h.
Referenced by IntWinAgentHandleDriverVmcall().
unsigned int _AGENT_COMMAND::Synched |
Always FALSE for now. Will not wait for the process agent to finish.
Definition at line 72 of file aghcall.h.
Referenced by IntWinAgentHandleDriverVmcall().
unsigned int _AGENT_COMMAND::Type |
The agent type. One of AGENT_TYPE.
Definition at line 70 of file aghcall.h.
Referenced by IntWinAgentHandleDriverVmcall().
unsigned int _AGENT_COMMAND::Version |
Structure version. Check out AGENT_COMMAND_VERSION.
Definition at line 69 of file aghcall.h.
Referenced by IntWinAgentHandleDriverVmcall().