_PATTERN_SIGNATURE Struct Reference

Describes a signature that can be used for searching or matching guest contents. More...

#include <patsig.h>

Data Fields
DWORD	Length
	The valid size of the Pattern array. More...
DWORD	SignatureId
	Signature ID. More...
DWORD	Offset
	Offset inside the tested buffer at which the pattern should be found. More...
INT64	AuxData
WORD	Pattern [SIG_MAX_PATTERN]

Detailed Description

Describes a signature that can be used for searching or matching guest contents.

Definition at line 23 of file patsig.h.

Field Documentation

AuxData

INT64 _PATTERN_SIGNATURE::AuxData

Signature specific auxiliary data.

Definition at line 28 of file patsig.h.

Length

DWORD _PATTERN_SIGNATURE::Length

The valid size of the Pattern array.

Definition at line 25 of file patsig.h.

Referenced by IntCamiLoadPatternSignatures(), IntCamiLoadWindows(), and IntGuestDetectOsSysCall().

Offset

DWORD _PATTERN_SIGNATURE::Offset

Offset inside the tested buffer at which the pattern should be found.

Definition at line 27 of file patsig.h.

Referenced by IntCamiLoadPatternSignatures().

Pattern

WORD _PATTERN_SIGNATURE::Pattern[SIG_MAX_PATTERN]

The pattern that must be matched.

Each entry is a byte that must be matched. 0x100 can be used as a wild card for matching anything.

Definition at line 32 of file patsig.h.

Referenced by IntCamiLoadPatternSignatures(), IntCamiLoadWindows(), and IntWinAgentFindSyscallLinkage().

SignatureId

DWORD _PATTERN_SIGNATURE::SignatureId

Signature ID.

Definition at line 26 of file patsig.h.

Referenced by IntCamiLoadPatternSignatures(), and IntGuestDetectOsSysCall().

---

The documentation for this struct was generated from the following file:

• introcore/include/patsig.h