_EVENT_MSR_VIOLATION Struct Reference

Event structure for MSR violation. More...

#include <intro_types.h>

Data Fields
INTRO_VIOLATION_HEADER	Header
	The alert header. More...
struct {
INTRO_MODULE   Module
	The module that did the malicious access. More...
INTRO_MODULE   ReturnModule
	The module to which the current code return to. More...
}	Originator
union {
DWORD   Msr
	The ID of the MSR as defined by the Intel documentation. More...
}	Victim
INTRO_WRITE_INFO	WriteInfo
	The original value of the MSR and the value that the guest tried to write. More...
INTRO_CODEBLOCKS	CodeBlocks
	Code blocks extracted for the alert. More...
INTRO_EXEC_CONTEXT	ExecContext
	Information about the instruction that triggered the alert. More...

Detailed Description

Event structure for MSR violation.

Definition at line 1316 of file intro_types.h.

Field Documentation

CodeBlocks

INTRO_CODEBLOCKS _EVENT_MSR_VIOLATION::CodeBlocks

Code blocks extracted for the alert.

Definition at line 1337 of file intro_types.h.

Referenced by IntLixMsrHandleWrite(), and IntWinMsrSendAlert().

ExecContext

INTRO_EXEC_CONTEXT _EVENT_MSR_VIOLATION::ExecContext

Information about the instruction that triggered the alert.

Definition at line 1339 of file intro_types.h.

Referenced by IntLixMsrHandleWrite(), and IntWinMsrSendAlert().

Header

INTRO_VIOLATION_HEADER _EVENT_MSR_VIOLATION::Header

The alert header.

Definition at line 1318 of file intro_types.h.

Referenced by IntLixMsrHandleWrite(), and IntWinMsrSendAlert().

Module

INTRO_MODULE _EVENT_MSR_VIOLATION::Module

The module that did the malicious access.

Definition at line 1325 of file intro_types.h.

Referenced by IntLixMsrHandleWrite().

Msr

DWORD _EVENT_MSR_VIOLATION::Msr

The ID of the MSR as defined by the Intel documentation.

Definition at line 1331 of file intro_types.h.

Referenced by IntLixMsrHandleWrite().

Originator

struct { ... } _EVENT_MSR_VIOLATION::Originator

Describes the attacker

Referenced by IntLixMsrHandleWrite().

ReturnModule

INTRO_MODULE _EVENT_MSR_VIOLATION::ReturnModule

The module to which the current code return to.

Definition at line 1326 of file intro_types.h.

Referenced by IntLixMsrHandleWrite().

Victim

union { ... } _EVENT_MSR_VIOLATION::Victim

Referenced by IntLixMsrHandleWrite().

WriteInfo

INTRO_WRITE_INFO _EVENT_MSR_VIOLATION::WriteInfo

The original value of the MSR and the value that the guest tried to write.

Definition at line 1335 of file intro_types.h.

Referenced by IntLixMsrHandleWrite().

---

The documentation for this struct was generated from the following file:

• include/public/intro_types.h