Bitdefender Hypervisor Memory Introspection
_HOOK_EPT_ENTRY Struct Reference

#include <hook_gpa.h>

Data Fields

LIST_ENTRY Link
 List entry element. More...
 
QWORD GpaPage
 Guest physical page address. More...
 
DWORD ReadCount
 Number of read EPT hooks. More...
 
DWORD WriteCount
 Number of write EPT hooks. More...
 
DWORD ExecuteCount
 Number of execute EPT hooks. More...
 
DWORD PtCount
 Number of PT hooks. More...
 
DWORD ConvCount
 
HOOK_SPP_ENTRYSpp
 SPP entry. Allocated only for write hooks that are less than a page in size. More...
 

Detailed Description

Introcore shadow EPT structure. Each guest physical page that is hooked by Introcore will have such an entry associated.

Definition at line 72 of file hook_gpa.h.

Field Documentation

◆ ConvCount

DWORD _HOOK_EPT_ENTRY::ConvCount

Number of convertible pages.

Definition at line 81 of file hook_gpa.h.

Referenced by IntHookGpaEnableDisableVe(), IntHookGpaSetHook(), and IntHookGpaSetNewPageProtection().

◆ ExecuteCount

◆ GpaPage

◆ Link

LIST_ENTRY _HOOK_EPT_ENTRY::Link

List entry element.

Definition at line 74 of file hook_gpa.h.

Referenced by IntHookGpaGetEptEntry(), and IntHookGpaSetNewPageProtection().

◆ PtCount

DWORD _HOOK_EPT_ENTRY::PtCount

◆ ReadCount

◆ Spp

HOOK_SPP_ENTRY* _HOOK_EPT_ENTRY::Spp

SPP entry. Allocated only for write hooks that are less than a page in size.

Definition at line 83 of file hook_gpa.h.

Referenced by IntHookGpaSetHook(), and IntHookGpaSetNewPageProtection().

◆ WriteCount

DWORD _HOOK_EPT_ENTRY::WriteCount

The documentation for this struct was generated from the following file: