Edit

Share via

PSS_WALK_INFORMATION_CLASS enumeration (processsnapshot.h)

  • Article

Specifies what information the PssWalkSnapshot function returns.

Syntax

typedef enum {
  PSS_WALK_AUXILIARY_PAGES = 0,
  PSS_WALK_VA_SPACE = 1,
  PSS_WALK_HANDLES = 2,
  PSS_WALK_THREADS = 3,
  PSS_WALK_THREAD_NAME
} PSS_WALK_INFORMATION_CLASS;

Constants

 
PSS_WALK_AUXILIARY_PAGES
Value: 0
Returns a PSS_AUXILIARY_PAGE_ENTRY structure, which contains the address, page attributes and contents of an auxiliary copied page.
PSS_WALK_VA_SPACE
Value: 1
Returns a PSS_VA_SPACE_ENTRY structure, which contains the MEMORY_BASIC_INFORMATION structure for every distinct VA region.
PSS_WALK_HANDLES
Value: 2
Returns a PSS_HANDLE_ENTRY structure, with information specifying the handle value, its type name, object name (if captured), basic information (if captured), and type-specific information (if captured).
PSS_WALK_THREADS
Value: 3
Returns a PSS_THREAD_ENTRY structure, with basic information about the thread, as well as its termination state, suspend count and Win32 start address.

Requirements

Requirement Value
Minimum supported client Windows 8.1 [desktop apps only]
Minimum supported server Windows Server 2012 R2 [desktop apps only]
Header processsnapshot.h

See also

Process Snapshotting