types

type AlpcPortInfo struct {
	Flags   uint32
	Seqno   uint32
	Context uintptr
}

type FileInfo struct {
	IsDirectory bool
}

type Handle struct {
	// Num represents the internal handle identifier.
	Num handle.Handle `json:"id"`
	// Object is the kernel address that this handle references.
	Object uint64 `json:"object"`
	// Pid represents the process's identifier that owns the handle.
	Pid uint32 `json:"-"`
	// Type is the type of this handle (e.g. File, Key, Mutant, Section)
	Type string `json:"type"`
	// Name is the actual value of the handle (e.g. \Device\HarddiskVolume4\Windows\Temp\DPTF)
	Name string `json:"name"`
	// MD is the handle meta information (e.g. ALPC port info)
	MD Meta `json:"meta,omitempty"`
}

type Handles []Handle

type Meta interface{}

type MutantInfo struct {
	Count       int32
	IsAbandoned bool
}