_GENERIC_ALERT Union Reference

Holds all the alert types. More...

#include <alerts.h>

Data Fields
EVENT_EPT_VIOLATION	Ept
EVENT_MSR_VIOLATION	Msr
EVENT_CR_VIOLATION	Cr
EVENT_XCR_VIOLATION	Xcr
EVENT_DTR_VIOLATION	Dtr
EVENT_MEMCOPY_VIOLATION	Injection
EVENT_TRANSLATION_VIOLATION	Translation
EVENT_INTEGRITY_VIOLATION	Integrity
EVENT_INTROSPECTION_MESSAGE	Message
EVENT_PROCESS_EVENT	Process
EVENT_MODULE_EVENT	Module
EVENT_CRASH_EVENT	Crash
EVENT_EXCEPTION_EVENT	Exception
EVENT_AGENT_EVENT	Agent
EVENT_CONNECTION_EVENT	Connection
EVENT_PROCESS_CREATION_VIOLATION	ProcessCreation
EVENT_MODULE_LOAD_VIOLATION	ModuleLoad
EVENT_ENGINES_DETECTION_VIOLATION	EngineDetection

Detailed Description

Holds all the alert types.

Definition at line 14 of file alerts.h.

Field Documentation

Agent

EVENT_AGENT_EVENT _GENERIC_ALERT::Agent

Definition at line 29 of file alerts.h.

Referenced by IntAgentHandleLogGatherVmcall(), IntAgentHandleRemediationVmcall(), IntLixAgentHandleUserVmcall(), IntLixAgentSendEvent(), IntLixTaskSendAgentEvent(), IntWinAgentHandleAppVmcall(), IntWinAgentHandleDriverVmcall(), IntWinDepComplete(), IntWinDepDeploy(), and IntWinProcSendAgentEvent().

Connection

EVENT_CONNECTION_EVENT _GENERIC_ALERT::Connection

Definition at line 30 of file alerts.h.

Referenced by IntLixNetSendConnectionEvent(), and IntWinNetSendConnectionEvent().

Cr

EVENT_CR_VIOLATION _GENERIC_ALERT::Cr

Definition at line 18 of file alerts.h.

Referenced by IntCrSendAlert().

Crash

EVENT_CRASH_EVENT _GENERIC_ALERT::Crash

Definition at line 27 of file alerts.h.

Referenced by IntLixCrashSendPanicEvent(), and IntWinBcSendBsodEvent().

Dtr

EVENT_DTR_VIOLATION _GENERIC_ALERT::Dtr

Definition at line 20 of file alerts.h.

Referenced by IntDtrSendAlert().

EngineDetection

EVENT_ENGINES_DETECTION_VIOLATION _GENERIC_ALERT::EngineDetection

Definition at line 33 of file alerts.h.

Referenced by IntEngSendExecViolation(), IntLixCmdLineSendViolationEvent(), and IntWinSendCmdLineViolation().

Ept

EVENT_EPT_VIOLATION _GENERIC_ALERT::Ept

Definition at line 16 of file alerts.h.

Referenced by IntLixDrvSendViolationEvent(), IntLixIdtWriteHandler(), IntLixKernelHandleRead(), IntLixVdsoHandleWriteCommon(), IntLixVmaHandlePageExecution(), IntVeHandleAccess(), IntVeHandleEPTViolationInProtectedView(), IntWinCrashHandleDepViolation(), IntWinDrvObjSendEptAlert(), IntWinDrvSendAlert(), IntWinHalHandleHalHeapExec(), IntWinHalSendAlert(), IntWinIdtWriteHandler(), IntWinInfHookEptSppSendAlert(), IntWinModHandleKernelWrite(), IntWinModHandleUserWrite(), IntWinModPolyHandler(), IntWinSelfMapHandleCr3SelfMapWrite(), IntWinSudSendSudExecAlert(), IntWinTokenPrivsSendEptAlert(), and IntWinVadIsExecSuspicious().

Exception

EVENT_EXCEPTION_EVENT _GENERIC_ALERT::Exception

Definition at line 28 of file alerts.h.

Referenced by IntLixTaskSendExceptionEvent(), and IntWinProcSendProcessExceptionEvent().

Injection

EVENT_MEMCOPY_VIOLATION _GENERIC_ALERT::Injection

Definition at line 21 of file alerts.h.

Referenced by IntLixTaskSendInjectionEvent(), IntWinProcHandleCopyMemory(), IntWinProcHandleInstrument(), IntWinThrHandleQueueApc(), and IntWinThrHandleThreadHijack().

Integrity

EVENT_INTEGRITY_VIOLATION _GENERIC_ALERT::Integrity

Definition at line 23 of file alerts.h.

Referenced by IntDetSendIntegrityAlert(), IntLixTaskSendCredViolationEvent(), IntSlackSendIntegrityAlert(), IntWinDrvObjSendIntegrityAlert(), IntWinHalHandleDispatchTableWrite(), IntWinHalSendPerfCntIntegrityAlert(), IntWinIdtSendIntegrityAlert(), IntWinInfHookIntegritySendAlert(), IntWinIntObjSendIntegrityAlert(), IntWinSDSendAclIntegrityViolation(), IntWinSDSendSecDescIntViolation(), IntWinSudSendSudIntegrityAlert(), IntWinTokenPrivsSendIntegrityAlert(), and IntWinTokenPtrCheckIntegrityOnProcess().

Message

EVENT_INTROSPECTION_MESSAGE _GENERIC_ALERT::Message

Definition at line 24 of file alerts.h.

Module

EVENT_MODULE_EVENT _GENERIC_ALERT::Module

Definition at line 26 of file alerts.h.

Referenced by IntLixDrvSendEvent(), IntWinDrvSendEvent(), and IntWinProcSendDllEvent().

ModuleLoad

EVENT_MODULE_LOAD_VIOLATION _GENERIC_ALERT::ModuleLoad

Definition at line 32 of file alerts.h.

Referenced by IntWinDagentSendDoubleAgentAlert().

Msr

EVENT_MSR_VIOLATION _GENERIC_ALERT::Msr

Definition at line 17 of file alerts.h.

Referenced by IntLixMsrHandleWrite(), and IntWinMsrSendAlert().

Process

EVENT_PROCESS_EVENT _GENERIC_ALERT::Process

Definition at line 25 of file alerts.h.

Referenced by IntLixTaskSendTaskEvent(), and IntWinProcSendProcessEvent().

ProcessCreation

EVENT_PROCESS_CREATION_VIOLATION _GENERIC_ALERT::ProcessCreation

Definition at line 31 of file alerts.h.

Referenced by IntLixTaskSendBlockedEvent(), and IntWinDpiSendProcessCreationViolation().

Translation

EVENT_TRANSLATION_VIOLATION _GENERIC_ALERT::Translation

Definition at line 22 of file alerts.h.

Referenced by IntHookGvaEnableHooks(), IntHookPtsCheckIntegrity(), IntWinProcValidateSystemCr3(), and IntWinSelfMapHandleCr3SelfMapModification().

Xcr

EVENT_XCR_VIOLATION _GENERIC_ALERT::Xcr

Definition at line 19 of file alerts.h.

---

The documentation for this union was generated from the following file:

• introcore/include/alerts.h