Bitdefender Hypervisor Memory Introspection
winsud.h
Go to the documentation of this file.
1 /*
2  * Copyright (c) 2020 Bitdefender
3  * SPDX-License-Identifier: Apache-2.0
4  */
5 #ifndef _WINSUD_H_
6 #define _WINSUD_H_
7 
8 #include "guests.h"
9 
11 #define WIN_SHARED_USER_DATA_PTR (gGuest.Guest64 ? 0xFFFFF78000000000 : 0xFFDF0000)
12 
13 INTSTATUS
14 IntWinSudProtectSudExec(
15  void
16  );
17 
18 INTSTATUS
19 IntWinSudUnprotectSudExec(
20  void
21  );
22 
23 TIMER_FRIENDLY INTSTATUS
24 IntWinSudCheckIntegrity(
25  void
26  );
27 
28 INTSTATUS
29 IntWinSudProtectIntegrity(
30  void
31  );
32 
33 INTSTATUS
34 IntWinSudUnprotectIntegrity(
35  void
36  );
37 
38 #endif //_WINSUD_H_
IntWinSudProtectIntegrity
INTSTATUS IntWinSudProtectIntegrity(void)
Initializes the SharedUserData integrity protection.
Definition: winsud.c:1099
INTSTATUS
int INTSTATUS
The status data type.
Definition: introstatus.h:24
IntWinSudProtectSudExec
INTSTATUS IntWinSudProtectSudExec(void)
Protects SharedUserData against executions by establishing an EPT hook on it.
Definition: winsud.c:661
IntWinSudUnprotectSudExec
INTSTATUS IntWinSudUnprotectSudExec(void)
Removes the execution EPT hook on SharedUserData.
Definition: winsud.c:697
TIMER_FRIENDLY
#define TIMER_FRIENDLY
Definition: introdefs.h:83
IntWinSudUnprotectIntegrity
INTSTATUS IntWinSudUnprotectIntegrity(void)
Uninitializes the SharedUserData integrity protection.
Definition: winsud.c:1178
IntWinSudCheckIntegrity
TIMER_FRIENDLY INTSTATUS IntWinSudCheckIntegrity(void)
This function checks the integrity of protected fields from SharedUserData, described in gProtFields...
Definition: winsud.c:980