#ifndef _NTPSAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)
/**
 * The PS_PROTECTED_SIGNER enumeration defines the types of signers that can be associated with a protected process.
 */
typedef enum _PS_PROTECTED_SIGNER
{
    PsProtectedSignerNone,          // No signer.
    PsProtectedSignerAuthenticode,  // Authenticode signer.
    PsProtectedSignerCodeGen,       // Code generation signer.
    PsProtectedSignerAntimalware,   // Antimalware signer.
    PsProtectedSignerLsa,           // Local Security Authority signer.
    PsProtectedSignerWindows,       // Windows signer.
    PsProtectedSignerWinTcb,        // Windows Trusted Computing Base signer.
    PsProtectedSignerWinSystem,     // Windows system signer.
    PsProtectedSignerApp,           // Application signer.
    PsProtectedSignerMax
} PS_PROTECTED_SIGNER;
View code on GitHubThe enumeration defines the strength and type of the signature for the process.
PsProtectedSignerNone (0) - the process has no signature that grants it protection.PsProtectedSignerAuthenticode (1) - the process has an Authenticode signature.PsProtectedSignerCodeGen (2) - the process has a Code Generation signature.PsProtectedSignerAntimalware (3) - the process has an Antimalware signature.PsProtectedSignerLsa (4) - the process has an LSA signature.PsProtectedSignerWindows (5) - the process has a Windows signature.PsProtectedSignerWinTcb (6) - the process has an WinTCB (trusted computer base) signature.PsProtectedSignerWinSystem (7) - the process has an WinSystem signature.PsProtectedSignerApp (8) - the process has a Store Application signature.