// extsfns.h

typedef enum _FA_EXTENSION_PLUGIN_PHASE {
  FA_PLUGIN_INITIALIZATION,
  FA_PLUGIN_STACK_ANALYSIS,
  FA_PLUGIN_PRE_BUCKETING,
  FA_PLUGIN_POST_BUCKETING
} FA_EXTENSION_PLUGIN_PHASE;
View the official Windows Driver Kit DDI reference

NtDoc

No description available.

Edit description on GitHub

Windows Driver Kit DDI reference (ne-extsfns-_fa_extension_plugin_phase)

_FA_EXTENSION_PLUGIN_PHASE enumeration

Description

A value in the FA_EXTENSION_PLUGIN_PHASE enumeration is passed to the _EFN_Analyze function to specify which phase of the analysis is currently in progress.

Constants

`FA_PLUGIN_INITIALIZATION`

The analysis is in the initialization phase. This is after the primary data such as exception record (for user mode) or bugcheck code (for kernel mode) is initialized.

`FA_PLUGIN_STACK_ANALYSIS`

The analysis is in the stack analysis phase. This is after the stack is analyzed, and the analysis engine has the information, if it was available on the stack, about the faulting symbol and module.

`FA_PLUGIN_PRE_BUCKETING`

The analysis is in the prebucketing phase. This is just before the analysis engine generates a bucket.

`FA_PLUGIN_POST_BUCKETING`

The analysis is in the post bucketing phase. This is just after the analysis engine generates a bucket.

FA_EXTENSION_PLUGIN_PHASE - NtDoc