// ntddk.h

typedef enum _BDCB_CLASSIFICATION {
  BdCbClassificationUnknownImage,
  BdCbClassificationKnownGoodImage,
  BdCbClassificationKnownBadImage,
  BdCbClassificationKnownBadImageBootCritical,
  BdCbClassificationEnd
} BDCB_CLASSIFICATION, *PBDCB_CLASSIFICATION;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ne-ntddk-_bdcb_classification)

_BDCB_CLASSIFICATION enumeration

Description

The BDCB_CLASSIFICATION enumeration lists different classifications of boot start images.

Constants

`BdCbClassificationUnknownImage`

The boot start image has not been inspected by anti-malware or anti-malware does not have enough information to determine whether the binary is malware.

`BdCbClassificationKnownGoodImage`

The boot start image has been inspected by anti-malware and found not to be malware.

`BdCbClassificationKnownBadImage`

The boot start image has been inspected by anti-malware and found to be malware.

`BdCbClassificationKnownBadImageBootCritical`

The boot start image has been inspected by anti-malware and found to be malware, but the anti-malware boot-start driver also knows it to be critical to the success of the boot.

`BdCbClassificationEnd`

Do not use. Reserved for future use.

BDCB_CLASSIFICATION - NtDoc