Bitdefender Hypervisor Memory Introspection
|
Data Fields | |
LIST_ENTRY | Link |
List entry element. More... | |
CHAR | ImageName [IMAGE_BASE_NAME_LEN] |
Image base name. More... | |
SIZE_T | NameLen |
Name length. More... | |
DWORD | Tag |
Agent tag. More... | |
DWORD | Agid |
Agent ID. More... | |
DWORD | RefCount |
Number of times this name has been used by agents. More... | |
Describes the name of an injected process agent. Whenever a named agent is injected, we allocate such an entry. Whenever a process is created, we check if its name matches the name of an injected agent; if it does, it will be flagged as being an agent. Therefore, it is advisable to use complicated names for the agents, in order to avoid having regular processes marked as agents.
Definition at line 153 of file winagent.c.
DWORD _AGENT_NAME::Agid |
Agent ID.
Definition at line 159 of file winagent.c.
Referenced by IntWinAgentInject(), and IntWinAgentRemoveEntryByAgid().
CHAR _AGENT_NAME::ImageName[IMAGE_BASE_NAME_LEN] |
Image base name.
Definition at line 156 of file winagent.c.
Referenced by IntWinAgentCheckIfProcessAgentAndDecrement(), IntWinAgentCheckIfProcessAgentAndIncrement(), and IntWinAgentInject().
LIST_ENTRY _AGENT_NAME::Link |
List entry element.
Definition at line 155 of file winagent.c.
Referenced by IntWinAgentActivatePendingAgent(), IntWinAgentCheckIfProcessAgentAndDecrement(), IntWinAgentCheckIfProcessAgentAndIncrement(), IntWinAgentDisablePendingAgents(), IntWinAgentGetState(), IntWinAgentInject(), IntWinAgentRemoveEntryByAgid(), and IntWinAgentUnInit().
SIZE_T _AGENT_NAME::NameLen |
DWORD _AGENT_NAME::RefCount |
Number of times this name has been used by agents.
Definition at line 160 of file winagent.c.
Referenced by IntWinAgentCheckIfProcessAgentAndDecrement(), IntWinAgentCheckIfProcessAgentAndIncrement(), and IntWinAgentInject().
DWORD _AGENT_NAME::Tag |
Agent tag.
Definition at line 158 of file winagent.c.
Referenced by IntWinAgentCheckIfProcessAgentAndDecrement(), IntWinAgentCheckIfProcessAgentAndIncrement(), IntWinAgentInject(), and IntWinAgentRemoveEntryByAgid().