PS_PROTECTED_TYPE - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers

#ifndef _NTPSAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)
// begin_private

typedef enum _PS_PROTECTED_TYPE
{
    PsProtectedTypeNone,
    PsProtectedTypeProtectedLight,
    PsProtectedTypeProtected,
    PsProtectedTypeMax
} PS_PROTECTED_TYPE;

// end_private
#endif
#endif
View code on GitHub

The enumeration defines the type of protection applied to the process.

Known values

PsProtectedTypeNone (0) - the process is not running as protected.
PsProtectedTypeProtectedLight (1) - the process is running as light-protected (PPL).
PsProtectedTypeProtected (2) - the process is running as fully-protected.

See also

PS_PROTECTION

Edit description on GitHub