Bitdefender Hypervisor Memory Introspection
_EVENT_CR_VIOLATION Struct Reference

Event structure for CR violation. More...

#include <intro_types.h>

Data Fields

INTRO_VIOLATION_HEADER Header
 The alert header. More...
 
struct {
   INTRO_MODULE   Module
 The module that attempted the write. More...
 
   INTRO_MODULE   ReturnModule
 The module to which the current code return to. More...
 
Originator
 
union {
   DWORD   Cr
 The number of the modified control register. More...
 
Victim
 
INTRO_WRITE_INFO WriteInfo
 The original value of the register and the value that the guest tried to write. More...
 
INTRO_CODEBLOCKS CodeBlocks
 Code blocks extracted for the alert. More...
 
INTRO_EXEC_CONTEXT ExecContext
 Information about the instruction that triggered the alert. More...
 

Detailed Description

Event structure for CR violation.

Definition at line 1346 of file intro_types.h.

Field Documentation

◆ CodeBlocks

INTRO_CODEBLOCKS _EVENT_CR_VIOLATION::CodeBlocks

Code blocks extracted for the alert.

Definition at line 1368 of file intro_types.h.

Referenced by IntCrSendAlert().

◆ Cr

DWORD _EVENT_CR_VIOLATION::Cr

The number of the modified control register.

Definition at line 1361 of file intro_types.h.

◆ ExecContext

INTRO_EXEC_CONTEXT _EVENT_CR_VIOLATION::ExecContext

Information about the instruction that triggered the alert.

Definition at line 1370 of file intro_types.h.

Referenced by IntCrSendAlert().

◆ Header

INTRO_VIOLATION_HEADER _EVENT_CR_VIOLATION::Header

The alert header.

Definition at line 1348 of file intro_types.h.

Referenced by IntCrSendAlert().

◆ Module

INTRO_MODULE _EVENT_CR_VIOLATION::Module

The module that attempted the write.

Definition at line 1355 of file intro_types.h.

◆ Originator

struct { ... } _EVENT_CR_VIOLATION::Originator

Describes the attacker.

◆ ReturnModule

INTRO_MODULE _EVENT_CR_VIOLATION::ReturnModule

The module to which the current code return to.

Definition at line 1356 of file intro_types.h.

◆ Victim

union { ... } _EVENT_CR_VIOLATION::Victim

◆ WriteInfo

INTRO_WRITE_INFO _EVENT_CR_VIOLATION::WriteInfo

The original value of the register and the value that the guest tried to write.

Definition at line 1366 of file intro_types.h.


The documentation for this struct was generated from the following file: