Bitdefender Hypervisor Memory Introspection
_VAS_ROOT Struct Reference

#include <vasmonitor.h>

Data Fields

LIST_ENTRY Link
 List entry link. More...
 
QWORD Cr3
 Monitored virtual address space. More...
 
void * Context
 Optional context, will be passed to the callback. More...
 
QWORD MonitoredBits
 Monitored bits inside page-table entries. More...
 
PFUNC_VaSpaceModificationCallback Callback
 
PVAS_TABLE Table
 This entry will contain the data associated to the PML4/PDP/PD - the first level. More...
 

Detailed Description

The root structure. This structure is used as a handle when placing virtual address space hooks.

Definition at line 80 of file vasmonitor.h.

Field Documentation

◆ Callback

PFUNC_VaSpaceModificationCallback _VAS_ROOT::Callback

Will be invoked whenever the VA described by this entry modifies.

Definition at line 86 of file vasmonitor.h.

Referenced by IntVasPageTableWriteCallback(), and IntVasStartMonitorVaSpace().

◆ Context

void* _VAS_ROOT::Context

Optional context, will be passed to the callback.

Definition at line 84 of file vasmonitor.h.

Referenced by IntVasPageTableWriteCallback(), and IntVasStartMonitorVaSpace().

◆ Cr3

QWORD _VAS_ROOT::Cr3

Monitored virtual address space.

Definition at line 83 of file vasmonitor.h.

Referenced by IntVasDump(), IntVasPageTableWriteCallback(), IntVasStartMonitorVaSpace(), and IntVasStopMonitorVaSpace().

◆ Link

LIST_ENTRY _VAS_ROOT::Link

List entry link.

Definition at line 82 of file vasmonitor.h.

Referenced by IntVasStartMonitorVaSpace().

◆ MonitoredBits

QWORD _VAS_ROOT::MonitoredBits

Monitored bits inside page-table entries.

Definition at line 85 of file vasmonitor.h.

Referenced by IntVasPageTableWriteCallback(), and IntVasStartMonitorVaSpace().

◆ Table

PVAS_TABLE _VAS_ROOT::Table

This entry will contain the data associated to the PML4/PDP/PD - the first level.

Definition at line 88 of file vasmonitor.h.

Referenced by IntVasDump(), and IntVasStartMonitorVaSpace().


The documentation for this struct was generated from the following file: