OBJECT_BASIC_INFORMATION - NtDoc
Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
#ifndef _NTOBAPI_H
typedef struct _OBJECT_BASIC_INFORMATION
{
ULONG Attributes;
ACCESS_MASK GrantedAccess;
ULONG HandleCount;
ULONG PointerCount;
ULONG PagedPoolCharge;
ULONG NonPagedPoolCharge;
ULONG Reserved[3];
ULONG NameInfoSize;
ULONG TypeInfoSize;
ULONG SecurityDescriptorSize;
LARGE_INTEGER CreationTime;
} OBJECT_BASIC_INFORMATION, *POBJECT_BASIC_INFORMATION;
View code on GitHubBasic kernel handle/object information, common to all object types. This structure is partially documented in Windows Driver Kit.
A bit mask containing attributes of the handle/object:
OBJ_PROTECT_CLOSE - the handle is protected from closing.OBJ_INHERIT - the handle is inheritable.OBJ_PERMANENT - object has permanent lifetime.OBJ_EXCLUSIVE - the handle/object is exclusive and prevents other handles from being open to the object.The access mask granted on the handle.
The number of handles pointing to the object.
The number of pointers to the object.
The number of paged pool bytes charged for the object.
The number of non-paged pool bytes charged for the object.
Unused field.
The number of bytes required to query object name information.
The number of bytes required to query object type information.
The number of bytes required to query the security descriptor of the object. Note that the system populates this field only when the handle grants READ_CONTROL access.
The time of creation for symbolic link objects.