#ifndef _NTPSAPI_H
/**
* The PROCESS_HANDLE_TABLE_ENTRY_INFO structure contains information about a handle table entry of a process.
*/
typedef struct _PROCESS_HANDLE_TABLE_ENTRY_INFO
{
HANDLE HandleValue; // The value of the handle.
SIZE_T HandleCount; // The number of references to the handle.
SIZE_T PointerCount; // The number of pointers to the handle.
ACCESS_MASK GrantedAccess; // The access rights granted to the handle.
ULONG ObjectTypeIndex; // The index of the object type.
ULONG HandleAttributes; // The attributes of the handle.
ULONG Reserved; // Reserved for future use.
} PROCESS_HANDLE_TABLE_ENTRY_INFO, *PPROCESS_HANDLE_TABLE_ENTRY_INFO;
View code on GitHub
This structure defines information about a handle opened by the process.
The value of the handle.
The number of handles pointing to the object.
The number of pointers to the object.
The access mask granted on the handle.
The index of this type in the global list of kernel types.
NtQueryObject
with OBJECT_INFORMATION_CLASS
value of ObjectTypesInformation
(3).A bit mask containing attributes of the handle/object:
OBJ_PROTECT_CLOSE
- the handle is protected from closing.OBJ_INHERIT
- the handle is inheritable.OBJ_PERMANENT
- object has permanent lifetime.OBJ_EXCLUSIVE
- the handle/object is exclusive and prevents other handles from being open to the object.This field in unused.
This structure was introduced in Windows 8.