Showing:

Annotations
Diagrams
Source
Used by
Main schema Win_Process_Object.xsd
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org.
Element WinProcessObj:Windows_Process
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
Windows_Process object is intended to characterize Windows processes.
Diagram
Diagram Win_Process_Object_xsd.tmp#WindowsProcessObjectType_aslr_enabled Win_Process_Object_xsd.tmp#WindowsProcessObjectType_dep_enabled Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Handle_List Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Priority Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Section_List Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Security_ID Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Startup_Info Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Security_Type Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Window_Title Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Thread Win_Process_Object_xsd.tmp#WindowsProcessObjectType
Type WinProcessObj:WindowsProcessObjectType
Type hierarchy
Children WinProcessObj:Handle_List, WinProcessObj:Priority, WinProcessObj:Section_List, WinProcessObj:Security_ID, WinProcessObj:Security_Type, WinProcessObj:Startup_Info, WinProcessObj:Thread, WinProcessObj:Window_Title
Source
 
<xs:element name="Windows_Process" type="WinProcessObj:WindowsProcessObjectType">
  <xs:annotation>
    <xs:documentation>Windows_Process object is intended to characterize Windows processes.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:WindowsProcessObjectType / WinProcessObj:Handle_List
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The Handle_List field specifies a list of Windows Handles opened or used by the process.
Diagram
Diagram
Type WindowsHandleListType
Source
 
<xs:element name="Handle_List" type="WinHandleObj:WindowsHandleListType" minOccurs="0" maxOccurs="1">
  <xs:annotation>
    <xs:documentation>The Handle_List field specifies a list of Windows Handles opened or used by the process.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:WindowsProcessObjectType / WinProcessObj:Priority
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The Priority field specifies the current priority of the process in Windows.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element name="Priority" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Priority field specifies the current priority of the process in Windows.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:WindowsProcessObjectType / WinProcessObj:Section_List
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The Section_List field specifies the memory sections used by the process.
Diagram
Diagram Win_Process_Object_xsd.tmp#MemorySectionListType_Memory_Section Win_Process_Object_xsd.tmp#MemorySectionListType
Type WinProcessObj:MemorySectionListType
Children WinProcessObj:Memory_Section
Source
 
<xs:element name="Section_List" type="WinProcessObj:MemorySectionListType" minOccurs="0" maxOccurs="1">
  <xs:annotation>
    <xs:documentation>The Section_List field specifies the memory sections used by the process.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:MemorySectionListType / WinProcessObj:Memory_Section
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The Memory_Section field specifies a memory section used by the process. It imports and uses the MemoryObjectType from the CybOX Memory Object.
Diagram
Diagram
Type MemoryObjectType
Source
 
<xs:element name="Memory_Section" type="MemoryObj:MemoryObjectType" minOccurs="1" maxOccurs="unbounded">
  <xs:annotation>
    <xs:documentation>The Memory_Section field specifies a memory section used by the process. It imports and uses the MemoryObjectType from the CybOX Memory Object.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:WindowsProcessObjectType / WinProcessObj:Security_ID
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The Security_ID field specifies the Security ID (SID) value assigned to the process.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element name="Security_ID" type="cyboxCommon:StringObjectPropertyType" minOccurs="0" maxOccurs="1">
  <xs:annotation>
    <xs:documentation>The Security_ID field specifies the Security ID (SID) value assigned to the process.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:WindowsProcessObjectType / WinProcessObj:Startup_Info
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The Startup_Info field specifies the STARTUP_INFO struct used by the process.
Diagram
Diagram Win_Process_Object_xsd.tmp#StartupInfoType_lpDesktop Win_Process_Object_xsd.tmp#StartupInfoType_lpTitle Win_Process_Object_xsd.tmp#StartupInfoType_dwX Win_Process_Object_xsd.tmp#StartupInfoType_dwY Win_Process_Object_xsd.tmp#StartupInfoType_dwXSize Win_Process_Object_xsd.tmp#StartupInfoType_dwYSize Win_Process_Object_xsd.tmp#StartupInfoType_dwXCountChars Win_Process_Object_xsd.tmp#StartupInfoType_dwYCountChars Win_Process_Object_xsd.tmp#StartupInfoType_dwFillAttribute Win_Process_Object_xsd.tmp#StartupInfoType_dwFlags Win_Process_Object_xsd.tmp#StartupInfoType_wShowWindow Win_Process_Object_xsd.tmp#StartupInfoType_hStdInput Win_Process_Object_xsd.tmp#StartupInfoType_hStdOutput Win_Process_Object_xsd.tmp#StartupInfoType_hStdError Win_Process_Object_xsd.tmp#StartupInfoType
Type WinProcessObj:StartupInfoType
Children WinProcessObj:dwFillAttribute, WinProcessObj:dwFlags, WinProcessObj:dwX, WinProcessObj:dwXCountChars, WinProcessObj:dwXSize, WinProcessObj:dwY, WinProcessObj:dwYCountChars, WinProcessObj:dwYSize, WinProcessObj:hStdError, WinProcessObj:hStdInput, WinProcessObj:hStdOutput, WinProcessObj:lpDesktop, WinProcessObj:lpTitle, WinProcessObj:wShowWindow
Source
 
<xs:element name="Startup_Info" type="WinProcessObj:StartupInfoType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Startup_Info field specifies the STARTUP_INFO struct used by the process.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:lpDesktop
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The lpDesktop field specifies the name of the desktop, or the name of both the desktop and window station for this process.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element name="lpDesktop" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The lpDesktop field specifies the name of the desktop, or the name of both the desktop and window station for this process.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:lpTitle
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The lpTitle field specifies the title displayed in the title bar if a new console window is created.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element name="lpTitle" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The lpTitle field specifies the title displayed in the title bar if a new console window is created.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:dwX
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The dwX field specifies the x offset of the upper left corner of a window if a new window is created, in pixels.
Diagram
Diagram
Type IntegerObjectPropertyType
Source
 
<xs:element name="dwX" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The dwX field specifies the x offset of the upper left corner of a window if a new window is created, in pixels.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:dwY
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The dwY field specifies the y offset of the upper left corner of a window if a new window is created, in pixels.
Diagram
Diagram
Type IntegerObjectPropertyType
Source
 
<xs:element name="dwY" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The dwY field specifies the y offset of the upper left corner of a window if a new window is created, in pixels.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:dwXSize
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The dwXSize field specifies the width of the window if a new window is created, in pixels.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element name="dwXSize" type="cyboxCommon:PositiveIntegerObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The dwXSize field specifies the width of the window if a new window is created, in pixels.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:dwYSize
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The dwYSize field specifies the height of the window if a new window is created, in pixels.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element name="dwYSize" type="cyboxCommon:PositiveIntegerObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The dwYSize field specifies the height of the window if a new window is created, in pixels.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:dwXCountChars
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The dwXCountChars field specifies the screen buffer width, in character columns.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element name="dwXCountChars" type="cyboxCommon:PositiveIntegerObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The dwXCountChars field specifies the screen buffer width, in character columns.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:dwYCountChars
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The dwYCountChars field specifies the screen buffer height, in character rows.
Diagram
Diagram
Type PositiveIntegerObjectPropertyType
Source
 
<xs:element name="dwYCountChars" type="cyboxCommon:PositiveIntegerObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The dwYCountChars field specifies the screen buffer height, in character rows.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:dwFillAttribute
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The dwFillAttribute field specifies the initial text and background colors if a new console window is created in a console application.
Diagram
Diagram
Type IntegerObjectPropertyType
Source
 
<xs:element name="dwFillAttribute" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The dwFillAttribute field specifies the initial text and background colors if a new console window is created in a console application.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:dwFlags
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The dwFlags field specifies a bitfield that determines whether certain STARTUPINFO members are used when the process creates a window.
Diagram
Diagram
Type IntegerObjectPropertyType
Source
 
<xs:element name="dwFlags" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The dwFlags field specifies a bitfield that determines whether certain STARTUPINFO members are used when the process creates a window.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:wShowWindow
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The wShowWindow field specifies STARTF_USESHOWWINDOW, this member can be any of the values that can be specified in the nCmdShow parameter for the ShowWindow function, except for SW_SHOWDEFAULT.
Diagram
Diagram
Type IntegerObjectPropertyType
Source
 
<xs:element name="wShowWindow" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The wShowWindow field specifies STARTF_USESHOWWINDOW, this member can be any of the values that can be specified in the nCmdShow parameter for the ShowWindow function, except for SW_SHOWDEFAULT.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:hStdInput
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The hStdInput field specifies the standard input handle for the process.
Diagram
Diagram
Type WindowsHandleObjectType
Source
 
<xs:element name="hStdInput" type="WinHandleObj:WindowsHandleObjectType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The hStdInput field specifies the standard input handle for the process.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:hStdOutput
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The hStdOutput field specifies the standard output handle for the process.
Diagram
Diagram
Type WindowsHandleObjectType
Source
 
<xs:element name="hStdOutput" type="WinHandleObj:WindowsHandleObjectType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The hStdOutput field specifies the standard output handle for the process.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:StartupInfoType / WinProcessObj:hStdError
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The hStdError field specifies the standard error handle for the process.
Diagram
Diagram
Type WindowsHandleObjectType
Source
 
<xs:element name="hStdError" type="WinHandleObj:WindowsHandleObjectType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The hStdError field specifies the standard error handle for the process.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:WindowsProcessObjectType / WinProcessObj:Security_Type
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The Security_Type field specifies the type of Security ID (SID) assigned to the process.
Diagram
Diagram
Type SIDType
Source
 
<xs:element name="Security_Type" type="cyboxCommon:SIDType" minOccurs="0" maxOccurs="1">
  <xs:annotation>
    <xs:documentation>The Security_Type field specifies the type of Security ID (SID) assigned to the process.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:WindowsProcessObjectType / WinProcessObj:Window_Title
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The Window_Title field specifies the title of the main window of the process.
Diagram
Diagram
Type StringObjectPropertyType
Source
 
<xs:element name="Window_Title" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
  <xs:annotation>
    <xs:documentation>The Window_Title field specifies the title of the main window of the process.</xs:documentation>
  </xs:annotation>
</xs:element>
Element WinProcessObj:WindowsProcessObjectType / WinProcessObj:Thread
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The Thread field specifies a single thread created to execute within the virtual address space of the process.
Diagram
Diagram
Type WindowsThreadObjectType
Source
 
<xs:element name="Thread" maxOccurs="unbounded" minOccurs="0" type="WinThreadObj:WindowsThreadObjectType">
  <xs:annotation>
    <xs:documentation>The Thread field specifies a single thread created to execute within the virtual address space of the process.</xs:documentation>
  </xs:annotation>
</xs:element>
Complex Type WinProcessObj:WindowsProcessObjectType
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The WindowsProcessObjectType type is intended to characterize Windows processes.
Diagram
Diagram Win_Process_Object_xsd.tmp#WindowsProcessObjectType_aslr_enabled Win_Process_Object_xsd.tmp#WindowsProcessObjectType_dep_enabled Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Handle_List Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Priority Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Section_List Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Security_ID Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Startup_Info Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Security_Type Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Window_Title Win_Process_Object_xsd.tmp#WindowsProcessObjectType_Thread
Type extension of ProcessObjectType
Type hierarchy
Used by
Children WinProcessObj:Handle_List, WinProcessObj:Priority, WinProcessObj:Section_List, WinProcessObj:Security_ID, WinProcessObj:Security_Type, WinProcessObj:Startup_Info, WinProcessObj:Thread, WinProcessObj:Window_Title
Source
 
<xs:complexType name="WindowsProcessObjectType" mixed="false">
  <xs:annotation>
    <xs:documentation>The WindowsProcessObjectType type is intended to characterize Windows processes.</xs:documentation>
  </xs:annotation>
  <xs:complexContent>
    <xs:extension base="ProcessObj:ProcessObjectType">
      <xs:sequence>
        <xs:element name="Handle_List" type="WinHandleObj:WindowsHandleListType" minOccurs="0" maxOccurs="1">
          <xs:annotation>
            <xs:documentation>The Handle_List field specifies a list of Windows Handles opened or used by the process.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Priority" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Priority field specifies the current priority of the process in Windows.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Section_List" type="WinProcessObj:MemorySectionListType" minOccurs="0" maxOccurs="1">
          <xs:annotation>
            <xs:documentation>The Section_List field specifies the memory sections used by the process.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Security_ID" type="cyboxCommon:StringObjectPropertyType" minOccurs="0" maxOccurs="1">
          <xs:annotation>
            <xs:documentation>The Security_ID field specifies the Security ID (SID) value assigned to the process.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Startup_Info" type="WinProcessObj:StartupInfoType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Startup_Info field specifies the STARTUP_INFO struct used by the process.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Security_Type" type="cyboxCommon:SIDType" minOccurs="0" maxOccurs="1">
          <xs:annotation>
            <xs:documentation>The Security_Type field specifies the type of Security ID (SID) assigned to the process.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Window_Title" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
          <xs:annotation>
            <xs:documentation>The Window_Title field specifies the title of the main window of the process.</xs:documentation>
          </xs:annotation>
        </xs:element>
        <xs:element name="Thread" maxOccurs="unbounded" minOccurs="0" type="WinThreadObj:WindowsThreadObjectType">
          <xs:annotation>
            <xs:documentation>The Thread field specifies a single thread created to execute within the virtual address space of the process.</xs:documentation>
          </xs:annotation>
        </xs:element>
      </xs:sequence>
      <xs:attribute name="aslr_enabled" type="xs:boolean">
        <xs:annotation>
          <xs:documentation>The aslr_enabled field specifies whether Address Space Layout Randomization (ASLR) is enabled for the process.</xs:documentation>
        </xs:annotation>
      </xs:attribute>
      <xs:attribute name="dep_enabled" type="xs:boolean">
        <xs:annotation>
          <xs:documentation>The dep_enabled field specifies whether Data Execution Prevention (DEP) is enabled for the process.</xs:documentation>
        </xs:annotation>
      </xs:attribute>
    </xs:extension>
  </xs:complexContent>
</xs:complexType>
Complex Type WinProcessObj:MemorySectionListType
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The MemorySectionListType type specifies a list of memory sections used by the process.
Diagram
Diagram Win_Process_Object_xsd.tmp#MemorySectionListType_Memory_Section
Used by
Children WinProcessObj:Memory_Section
Source
 
<xs:complexType name="MemorySectionListType">
  <xs:annotation>
    <xs:documentation>The MemorySectionListType type specifies a list of memory sections used by the process.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element name="Memory_Section" type="MemoryObj:MemoryObjectType" minOccurs="1" maxOccurs="unbounded">
      <xs:annotation>
        <xs:documentation>The Memory_Section field specifies a memory section used by the process. It imports and uses the MemoryObjectType from the CybOX Memory Object.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Complex Type WinProcessObj:StartupInfoType
Namespace http://cybox.mitre.org/objects#WinProcessObject-2
Annotations
 
The StartupInfoType type encapsulates the information contained in the STARTUPINFO struct for the process.
Diagram
Diagram Win_Process_Object_xsd.tmp#StartupInfoType_lpDesktop Win_Process_Object_xsd.tmp#StartupInfoType_lpTitle Win_Process_Object_xsd.tmp#StartupInfoType_dwX Win_Process_Object_xsd.tmp#StartupInfoType_dwY Win_Process_Object_xsd.tmp#StartupInfoType_dwXSize Win_Process_Object_xsd.tmp#StartupInfoType_dwYSize Win_Process_Object_xsd.tmp#StartupInfoType_dwXCountChars Win_Process_Object_xsd.tmp#StartupInfoType_dwYCountChars Win_Process_Object_xsd.tmp#StartupInfoType_dwFillAttribute Win_Process_Object_xsd.tmp#StartupInfoType_dwFlags Win_Process_Object_xsd.tmp#StartupInfoType_wShowWindow Win_Process_Object_xsd.tmp#StartupInfoType_hStdInput Win_Process_Object_xsd.tmp#StartupInfoType_hStdOutput Win_Process_Object_xsd.tmp#StartupInfoType_hStdError
Used by
Children WinProcessObj:dwFillAttribute, WinProcessObj:dwFlags, WinProcessObj:dwX, WinProcessObj:dwXCountChars, WinProcessObj:dwXSize, WinProcessObj:dwY, WinProcessObj:dwYCountChars, WinProcessObj:dwYSize, WinProcessObj:hStdError, WinProcessObj:hStdInput, WinProcessObj:hStdOutput, WinProcessObj:lpDesktop, WinProcessObj:lpTitle, WinProcessObj:wShowWindow
Source
 
<xs:complexType name="StartupInfoType">
  <xs:annotation>
    <xs:documentation>The StartupInfoType type encapsulates the information contained in the STARTUPINFO struct for the process.</xs:documentation>
  </xs:annotation>
  <xs:sequence>
    <xs:element name="lpDesktop" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The lpDesktop field specifies the name of the desktop, or the name of both the desktop and window station for this process.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="lpTitle" type="cyboxCommon:StringObjectPropertyType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The lpTitle field specifies the title displayed in the title bar if a new console window is created.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="dwX" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The dwX field specifies the x offset of the upper left corner of a window if a new window is created, in pixels.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="dwY" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The dwY field specifies the y offset of the upper left corner of a window if a new window is created, in pixels.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="dwXSize" type="cyboxCommon:PositiveIntegerObjectPropertyType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The dwXSize field specifies the width of the window if a new window is created, in pixels.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="dwYSize" type="cyboxCommon:PositiveIntegerObjectPropertyType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The dwYSize field specifies the height of the window if a new window is created, in pixels.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="dwXCountChars" type="cyboxCommon:PositiveIntegerObjectPropertyType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The dwXCountChars field specifies the screen buffer width, in character columns.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="dwYCountChars" type="cyboxCommon:PositiveIntegerObjectPropertyType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The dwYCountChars field specifies the screen buffer height, in character rows.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="dwFillAttribute" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The dwFillAttribute field specifies the initial text and background colors if a new console window is created in a console application.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="dwFlags" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The dwFlags field specifies a bitfield that determines whether certain STARTUPINFO members are used when the process creates a window.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="wShowWindow" type="cyboxCommon:IntegerObjectPropertyType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The wShowWindow field specifies STARTF_USESHOWWINDOW, this member can be any of the values that can be specified in the nCmdShow parameter for the ShowWindow function, except for SW_SHOWDEFAULT.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="hStdInput" type="WinHandleObj:WindowsHandleObjectType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The hStdInput field specifies the standard input handle for the process.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="hStdOutput" type="WinHandleObj:WindowsHandleObjectType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The hStdOutput field specifies the standard output handle for the process.</xs:documentation>
      </xs:annotation>
    </xs:element>
    <xs:element name="hStdError" type="WinHandleObj:WindowsHandleObjectType" minOccurs="0">
      <xs:annotation>
        <xs:documentation>The hStdError field specifies the standard error handle for the process.</xs:documentation>
      </xs:annotation>
    </xs:element>
  </xs:sequence>
</xs:complexType>
Attribute WinProcessObj:WindowsProcessObjectType / @aslr_enabled
Namespace No namespace
Annotations
 
The aslr_enabled field specifies whether Address Space Layout Randomization (ASLR) is enabled for the process.
Type xs:boolean
Used by
Source
 
<xs:attribute name="aslr_enabled" type="xs:boolean">
  <xs:annotation>
    <xs:documentation>The aslr_enabled field specifies whether Address Space Layout Randomization (ASLR) is enabled for the process.</xs:documentation>
  </xs:annotation>
</xs:attribute>
Attribute WinProcessObj:WindowsProcessObjectType / @dep_enabled
Namespace No namespace
Annotations
 
The dep_enabled field specifies whether Data Execution Prevention (DEP) is enabled for the process.
Type xs:boolean
Used by
Source
 
<xs:attribute name="dep_enabled" type="xs:boolean">
  <xs:annotation>
    <xs:documentation>The dep_enabled field specifies whether Data Execution Prevention (DEP) is enabled for the process.</xs:documentation>
  </xs:annotation>
</xs:attribute>
XML Schema documentation generated by ® XML Editor.