Bitdefender Hypervisor Memory Introspection
_AGENT_REM_EVENT Struct Reference

A remediation tool event. More...

#include <intro_types.h>

Data Fields

AGENT_REM_EVENT_HEADER Header
 Event header. More...
 
union {
   struct {
      DWORD   ScanStatus
 Start status. More...
 
   }   StartEvent
 Start event. Valid if Header.EventType is remEventStart. More...
 
   struct {
      DWORD   ScanResult
 Scan result. More...
 
   }   FinishEvent
 Finish event. Valid if Header.EventType is remEventFinish. More...
 
   struct {
      DWORD   Progress
 Progress. More...
 
   }   ProgressEvent
 Progress event. Valid if Header.EventType is remEventProgress. More...
 
   struct {
      BOOLEAN   RebootNeeded
 TRUE if a reboot is needed. More...
 
   }   RebootEvent
 Reboot event. Valid if Header.EventType is remEventReboot. More...
 
   struct {
      WCHAR   ObjectPath [REM_MAX_OBJECT_PATH_LEN]
 Path of the scanned object. More...
 
      WCHAR   Detection [REM_MAX_DETECTION_LEN]
 Detection name. More...
 
      DWORD   DetectionFlag
 Detection flags. More...
 
      DWORD   ActionResult
 Action result. More...
 
   }   DetectionEvent
 Detection event. Valid if Header.EventType is remEventDetection. More...
 
   struct {
      WCHAR   ObjectPath [REM_MAX_OBJECT_PATH_LEN]
 Path of the scanned object. More...
 
      WCHAR   Detection [REM_MAX_DETECTION_LEN]
 Detection name. More...
 
      DWORD   DetectionFlag
 Detection flags. More...
 
      DWORD   ActionResult
 Action result. More...
 
   }   DisinfectionEvent
 Disinfection event. Valid if Header.EventType is remEventDisinfection. More...
 
}; 
 

Detailed Description

A remediation tool event.

Events of these type are sent when the remediation tool has been injected and started inside the guest and it is executing intro calls (VMCALLs), reporting back to Introcore.

Definition at line 2172 of file intro_types.h.

Field Documentation

◆ @326

union { ... }

◆ ActionResult

DWORD _AGENT_REM_EVENT::ActionResult

Action result.

Definition at line 2212 of file intro_types.h.

◆ Detection

WCHAR _AGENT_REM_EVENT::Detection[REM_MAX_DETECTION_LEN]

Detection name.

Definition at line 2208 of file intro_types.h.

◆ DetectionEvent

struct { ... } _AGENT_REM_EVENT::DetectionEvent

Detection event. Valid if Header.EventType is remEventDetection.

Referenced by IntAgentHandleRemediationVmcall().

◆ DetectionFlag

DWORD _AGENT_REM_EVENT::DetectionFlag

Detection flags.

Definition at line 2210 of file intro_types.h.

◆ DisinfectionEvent

struct { ... } _AGENT_REM_EVENT::DisinfectionEvent

Disinfection event. Valid if Header.EventType is remEventDisinfection.

◆ FinishEvent

struct { ... } _AGENT_REM_EVENT::FinishEvent

Finish event. Valid if Header.EventType is remEventFinish.

Referenced by IntAgentHandleRemediationVmcall().

◆ Header

AGENT_REM_EVENT_HEADER _AGENT_REM_EVENT::Header

Event header.

Definition at line 2174 of file intro_types.h.

Referenced by IntAgentHandleRemediationVmcall().

◆ ObjectPath

WCHAR _AGENT_REM_EVENT::ObjectPath[REM_MAX_OBJECT_PATH_LEN]

Path of the scanned object.

Definition at line 2206 of file intro_types.h.

◆ Progress

DWORD _AGENT_REM_EVENT::Progress

Progress.

Definition at line 2193 of file intro_types.h.

◆ ProgressEvent

struct { ... } _AGENT_REM_EVENT::ProgressEvent

Progress event. Valid if Header.EventType is remEventProgress.

Referenced by IntAgentHandleRemediationVmcall().

◆ RebootEvent

struct { ... } _AGENT_REM_EVENT::RebootEvent

Reboot event. Valid if Header.EventType is remEventReboot.

Referenced by IntAgentHandleRemediationVmcall().

◆ RebootNeeded

BOOLEAN _AGENT_REM_EVENT::RebootNeeded

TRUE if a reboot is needed.

Definition at line 2199 of file intro_types.h.

◆ ScanResult

DWORD _AGENT_REM_EVENT::ScanResult

Scan result.

Definition at line 2187 of file intro_types.h.

◆ ScanStatus

DWORD _AGENT_REM_EVENT::ScanStatus

Start status.

Definition at line 2181 of file intro_types.h.

◆ StartEvent

struct { ... } _AGENT_REM_EVENT::StartEvent

Start event. Valid if Header.EventType is remEventStart.

Referenced by IntAgentHandleRemediationVmcall().


The documentation for this struct was generated from the following file: