当ObRegisterCallbacks 例程注册 ObjectPreCallback 和 ObjectPostCallback 回调例程时,OB_CALLBACK_REGISTRATION结构指定参数。
typedef struct _OB_CALLBACK_REGISTRATION { USHORT Version; USHORT OperationRegistrationCount; UNICODE_STRING Altitude; PVOID RegistrationContext; OB_OPERATION_REGISTRATION *OperationRegistration; } OB_CALLBACK_REGISTRATION, *POB_CALLBACK_REGISTRATION; MiembrosVersionVersión del registro de devolución de ll...
typedef struct _OB_CALLBACK_REGISTRATION { USHORT Version; USHORT OperationRegistrationCount; UNICODE_STRING Altitude; PVOID RegistrationContext; OB_OPERATION_REGISTRATION *OperationRegistration; } OB_CALLBACK_REGISTRATION, *POB_CALLBACK_REGISTRATION; Members Version The version of object callback registrat...
The following is another sample test you can run to prevent a process from being created: Windows 命令提示符 C:\>obcallbacktestctrl.exe-install(installsthekerneldriver)C:\>obcallbacktestctrl.exe-rejectnotepad(specifiesthatthestring"notepad"willbewatchedandpreventedfromstartingasaprocess)C:\>...
typedef struct _OB_CALLBACK_REGISTRATION { USHORT Version; USHORT OperationRegistrationCount; UNICODE_STRING Altitude; PVOID RegistrationContext; OB_OPERATION_REGISTRATION *OperationRegistration; } OB_CALLBACK_REGISTRATION, *POB_CALLBACK_REGISTRATION; Miembros Version Versión del registro de devolución ...
当ObRegisterCallbacks 例程注册 ObjectPreCallback 和 ObjectPostCallback 回调例程时,OB_CALLBACK_REGISTRATION 结构指定参数。
typedef struct _OB_CALLBACK_REGISTRATION { USHORT Version; USHORT OperationRegistrationCount; UNICODE_STRING Altitude; PVOID RegistrationContext; OB_OPERATION_REGISTRATION *OperationRegistration; } OB_CALLBACK_REGISTRATION, *POB_CALLBACK_REGISTRATION; Miembros Version Versión del registro de devolución ...
typedef struct _OB_CALLBACK_REGISTRATION { USHORT Version; USHORT OperationRegistrationCount; UNICODE_STRING Altitude; PVOID RegistrationContext; OB_OPERATION_REGISTRATION *OperationRegistration; } OB_CALLBACK_REGISTRATION, *POB_CALLBACK_REGISTRATION; Members Version The version of object callback registrat...
La estructura OB_CALLBACK_REGISTRATION especifica los parámetros cuando la rutina ObRegisterCallbacks registra las rutinas de devolución de llamada ObjectPreCallback y ObjectPostCallback.