Panoptes 1.0.0
Endpoint Detection and Response
Loading...
Searching...
No Matches
Public Attributes | List of all members
_PANO_PROCESS_INFO Struct Reference

#include <structs.h>

Public Attributes

LIST_ENTRY ListEntry
 
BOOLEAN is64Bit
 
HANDLE ProcessId
 
BOOLEAN Injected
 
BOOLEAN ntdllLoaded
 
BOOLEAN kernel32Loaded
 
BOOLEAN kernelBaseLoaded
 
PVOID kernel32BaseAddress
 

Detailed Description

Definition at line 4 of file structs.h.

Member Data Documentation

◆ Injected

BOOLEAN _PANO_PROCESS_INFO::Injected

Definition at line 9 of file structs.h.

Referenced by LoadImageNotifyRoutine(), and ProcessCreateCallback().

◆ is64Bit

BOOLEAN _PANO_PROCESS_INFO::is64Bit

Definition at line 7 of file structs.h.

Referenced by InjectDllKernelApc(), and LoadImageNotifyRoutine().

◆ kernel32BaseAddress

PVOID _PANO_PROCESS_INFO::kernel32BaseAddress

Definition at line 13 of file structs.h.

Referenced by InjectDllKernelApc(), and LoadImageNotifyRoutine().

◆ kernel32Loaded

BOOLEAN _PANO_PROCESS_INFO::kernel32Loaded

Definition at line 11 of file structs.h.

Referenced by CanInject(), LoadImageNotifyRoutine(), and ProcessCreateCallback().

◆ kernelBaseLoaded

BOOLEAN _PANO_PROCESS_INFO::kernelBaseLoaded

Definition at line 12 of file structs.h.

Referenced by CanInject(), LoadImageNotifyRoutine(), and ProcessCreateCallback().

◆ ListEntry

LIST_ENTRY _PANO_PROCESS_INFO::ListEntry

Definition at line 6 of file structs.h.

Referenced by ProcessCreateCallback().

◆ ntdllLoaded

BOOLEAN _PANO_PROCESS_INFO::ntdllLoaded

Definition at line 10 of file structs.h.

Referenced by CanInject(), LoadImageNotifyRoutine(), and ProcessCreateCallback().

◆ ProcessId

HANDLE _PANO_PROCESS_INFO::ProcessId

Definition at line 8 of file structs.h.

Referenced by GetProcessInfo(), ProcessCreateCallback(), and RemoveProcessInfo().


The documentation for this struct was generated from the following file: