#ifndef _NTPSAPI_H
typedef struct _PROCESS_HANDLE_TABLE_ENTRY_INFO
{
HANDLE HandleValue;
SIZE_T HandleCount;
SIZE_T PointerCount;
ACCESS_MASK GrantedAccess;
ULONG ObjectTypeIndex;
ULONG HandleAttributes;
ULONG Reserved;
} PROCESS_HANDLE_TABLE_ENTRY_INFO, *PPROCESS_HANDLE_TABLE_ENTRY_INFO;
View code on GitHub
This structure defines information about a handle opened by the process.
The value of the handle.
The number of handles pointing to the object.
The number of pointers to the object.
The access mask granted on the handle.
The index of this type in the global list of kernel types.
NtQueryObject
with OBJECT_INFORMATION_CLASS
value of ObjectTypesInformation
(3).A bit mask containing attributes of the handle/object:
OBJ_PROTECT_CLOSE
- the handle is protected from closing.OBJ_INHERIT
- the handle is inheritable.OBJ_PERMANENT
- object has permanent lifetime.OBJ_EXCLUSIVE
- the handle/object is exclusive and prevents other handles from being open to the object.This field in unused.
This structure was introduced in Windows 8.