PS_PROTECTED_TYPE - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers

#ifndef _NTPSAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)

/**
 * The PS_PROTECTED_TYPE enumeration defines the types of protection that can be applied to a process.
 */
typedef enum _PS_PROTECTED_TYPE
{
    PsProtectedTypeNone,            // No protection.
    PsProtectedTypeProtectedLight,  // Light protection.
    PsProtectedTypeProtected,       // Full protection.
    PsProtectedTypeMax
} PS_PROTECTED_TYPE;

#endif
#endif
View code on GitHub

NtDoc

The enumeration defines the type of protection applied to the process.

Known values

PsProtectedTypeNone (0) - the process is not running as protected.
PsProtectedTypeProtectedLight (1) - the process is running as light-protected (PPL).
PsProtectedTypeProtected (2) - the process is running as fully-protected.

NtDoc

Known values

See also