Event structure for XCR violation. More...

#include <intro_types.h>

Data Fields
INTRO_VIOLATION_HEADER	Header
	The alert header,. More...

struct {
INTRO_MODULE Module
	The module that attempted the write. More...

INTRO_MODULE ReturnModule
	The module to which the current code return to. More...

}	Originator

union {
DWORD Xcr
	The number of the modified extended control register. More...

}	Victim

INTRO_WRITE_INFO	WriteInfo
	The original value of the register and the value that the guest tried to write. More...

INTRO_CODEBLOCKS	CodeBlocks
	Code blocks extracted for the alert. More...

INTRO_EXEC_CONTEXT	ExecContext
	Information about the instruction that triggered the alert. More...

Detailed Description

Event structure for XCR violation.

Definition at line 1378 of file intro_types.h.

Field Documentation

◆ CodeBlocks

INTRO_CODEBLOCKS _EVENT_XCR_VIOLATION::CodeBlocks

Code blocks extracted for the alert.

Definition at line 1399 of file intro_types.h.

◆ ExecContext

INTRO_EXEC_CONTEXT _EVENT_XCR_VIOLATION::ExecContext

Information about the instruction that triggered the alert.

Definition at line 1401 of file intro_types.h.

◆ Header

INTRO_VIOLATION_HEADER _EVENT_XCR_VIOLATION::Header

The alert header,.

Definition at line 1380 of file intro_types.h.

◆ Module

INTRO_MODULE _EVENT_XCR_VIOLATION::Module

The module that attempted the write.

Definition at line 1387 of file intro_types.h.

◆ Originator

struct { ... } _EVENT_XCR_VIOLATION::Originator

Describes the attacker

◆ ReturnModule

INTRO_MODULE _EVENT_XCR_VIOLATION::ReturnModule

The module to which the current code return to.

Definition at line 1388 of file intro_types.h.

◆ Victim

union { ... } _EVENT_XCR_VIOLATION::Victim

◆ WriteInfo

INTRO_WRITE_INFO _EVENT_XCR_VIOLATION::WriteInfo

The original value of the register and the value that the guest tried to write.

Definition at line 1397 of file intro_types.h.

◆ Xcr

DWORD _EVENT_XCR_VIOLATION::Xcr

The number of the modified extended control register.

Definition at line 1393 of file intro_types.h.

The documentation for this struct was generated from the following file:

include/public/intro_types.h

Data Fields