Informative Information for the Uninformed | ||||||||||||||
|
||||||||||||||
Thread ObjectsHere are just a few of the most basic ETHREAD fields which can form a simple signature using rather predictable constant values which hold true for all ETHREAD structures in the same system.
Note that there are several other DISPATCH_HEADERs embedded within locks, events, timers, etc in the structure which also have a predicable Header.Type and Header.Size.
|