Bitdefender Hypervisor Memory Introspection
|
#include <hook_gpa.h>
Data Fields | |
LIST_ENTRY | Link |
List entry element. More... | |
QWORD | GpaPage |
Guest physical page address. More... | |
DWORD | ReadCount |
Number of read EPT hooks. More... | |
DWORD | WriteCount |
Number of write EPT hooks. More... | |
DWORD | ExecuteCount |
Number of execute EPT hooks. More... | |
DWORD | PtCount |
Number of PT hooks. More... | |
DWORD | ConvCount |
HOOK_SPP_ENTRY * | Spp |
SPP entry. Allocated only for write hooks that are less than a page in size. More... | |
Introcore shadow EPT structure. Each guest physical page that is hooked by Introcore will have such an entry associated.
Definition at line 72 of file hook_gpa.h.
DWORD _HOOK_EPT_ENTRY::ConvCount |
Number of convertible pages.
Definition at line 81 of file hook_gpa.h.
Referenced by IntHookGpaEnableDisableVe(), IntHookGpaSetHook(), and IntHookGpaSetNewPageProtection().
DWORD _HOOK_EPT_ENTRY::ExecuteCount |
Number of execute EPT hooks.
Definition at line 79 of file hook_gpa.h.
Referenced by IntHookGpaEnableDisablePtCache(), IntHookGpaEnableDisableVe(), IntHookGpaGetEPTPageProtection(), IntHookGpaSetHook(), IntHookGpaSetNewPageProtection(), and IntValidatePageRightsEx().
QWORD _HOOK_EPT_ENTRY::GpaPage |
Guest physical page address.
Definition at line 75 of file hook_gpa.h.
Referenced by IntHookGpaEnableDisablePtCache(), IntHookGpaEnableDisableVe(), IntHookGpaFindConvertible(), IntHookGpaGetEptEntry(), IntHookGpaGetExistingEptEntry(), and IntHookGpaSetHook().
LIST_ENTRY _HOOK_EPT_ENTRY::Link |
List entry element.
Definition at line 74 of file hook_gpa.h.
Referenced by IntHookGpaGetEptEntry(), and IntHookGpaSetNewPageProtection().
DWORD _HOOK_EPT_ENTRY::PtCount |
Number of PT hooks.
Definition at line 80 of file hook_gpa.h.
Referenced by IntHookGpaEnableDisablePtCache(), IntHookGpaEnableDisableVe(), IntHookGpaFindConvertible(), IntHookGpaSetHook(), and IntHookGpaSetNewPageProtection().
DWORD _HOOK_EPT_ENTRY::ReadCount |
Number of read EPT hooks.
Definition at line 77 of file hook_gpa.h.
Referenced by IntHookGpaEnableDisablePtCache(), IntHookGpaEnableDisableVe(), IntHookGpaGetEPTPageProtection(), IntHookGpaSetHook(), IntHookGpaSetNewPageProtection(), and IntValidatePageRightsEx().
HOOK_SPP_ENTRY* _HOOK_EPT_ENTRY::Spp |
SPP entry. Allocated only for write hooks that are less than a page in size.
Definition at line 83 of file hook_gpa.h.
Referenced by IntHookGpaSetHook(), and IntHookGpaSetNewPageProtection().
DWORD _HOOK_EPT_ENTRY::WriteCount |
Number of write EPT hooks.
Definition at line 78 of file hook_gpa.h.
Referenced by IntHookGpaEnableDisableVe(), IntHookGpaGetEPTPageProtection(), IntHookGpaSetHook(), IntHookGpaSetNewPageProtection(), and IntValidatePageRightsEx().