mirror of
https://github.com/wavestone-cdt/EDRSandblast.git
synced 2026-06-08 16:37:12 +00:00
Qazeer
16 lines
418 B
C
16 lines
418 B
C
#pragma once
|
|
#include <Windows.h>
|
|
#include <tchar.h>
|
|
|
|
#include "../EDRSandblast.h"
|
|
#include "SW2_Syscalls.h"
|
|
|
|
#define ProcessImageFileName 27
|
|
|
|
DWORD SandGetProcessPID(HANDLE hProcess);
|
|
|
|
PUNICODE_STRING SandGetProcessImage(HANDLE hProcess);
|
|
|
|
DWORD SandGetProcessFilename(PUNICODE_STRING ProcessImageUnicodeStr, TCHAR* ImageFileName, DWORD nSize);
|
|
|
|
DWORD SandFindProcessPidByName(TCHAR* targetProcessName, DWORD* pPid); |