This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org. Win_Handle_Object 2.1 01/22/2014 The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included. The Windows_Handle object is intended to characterize Windows handles. The WindowsHandleObjectType type is intended to characterize Windows handles. The ID field refers to the unique number used to identify the handle. The Name field specifies the name of the handle. The Type field specifies the handle type, which is equivalent to the type of Windows object that the handle refers to. The Object_Address field specifies the address of the Windows object that the handle refers to. The Access_Mask field specifies the access bitmask of the handle. The Pointer_Count field specifies the count of pointer references to the Windows object that the handle refers to. The WindowsHandleListType type specifies a list of Windows handles, for re-use in other objects. The Handle field characterizes a single Windows handle. HandleType specifies Windows handle types via a union of the HandleTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications. This attribute is optional and specifies the expected type for the value of the specified property. The WindowsHandleType is a non-exhaustive enumeration of Windows handle types. Specifies an access token handle. Specifies an event handle. Specifies a file handle. Specifies a file mapping handle. Specifies a job handle. Specifies an IO completion port handle. Specifies a mailslot handle. Specifies a mutex handle. Specifies a named pipe handle. Specifies a pipe handle. Specifies a process handle. Specifies a semaphore handle. Specifies a thread handle. Specifies a transaction handle. Specifies a waitable timer handle. Specifies a registry key handle. Specifies a window handle. Specifies a service control manager handle. Specifies a communications device handle. Specifies a console input handle. Specifies a console screen buffer handle. Specifies a memory resource notification handle. Specifies a directory handle. Specifies a symbolic link handle. Specifies a token handle. Specifies a profile handle. Specifies a window station handle. Specifies a port handle. Specifies a waitable port handle. Specifies a controller handle. Specifies a driver handle. Specifies a desktop handle. Specifies an adapter handle. Specifies a bitmap handle. Specifies a brush handle. Specifies a color space handle. Specifies a cursor handle. Specifies a device context handle. Specifies an enhanced metafile handle. Specifies a font handle. Specifies a GDI object handle. Specifies a hook handle. Specifies an icon handle. Specifies a module instance handle. Specifies a menu handle. Specifies a metafile handle. Specifies a display monitor handle. Specifies a palette handle. Specifies a pen handle. Specifies a region handle. Specifies a resource handle.