What does "PROCESS_TRUST_LABEL_SECURITY_INFORMATION" mean?

chong 21 Reputation points
2021-09-09T09:26:45.457+00:00

First of all, I'm sorry about my English.
I am developing a filter driver.
"PROCESS_TRUST_LABEL_SECURITY_INFORMATION" is called by Windows Defender in IRP_MJ_SET_SECURITY.
Microsoft's documentation states that this means "reserved".
I want to know the detailed meaning of "PROCESS_TRUST_LABEL_SECURITY_INFORMATION".

Windows for IoT
Windows for IoT
A family of Microsoft operating systems designed for use in Internet of Things (IoT) devices.
383 questions
0 comments No comments
{count} votes

Accepted answer
  1. Seeya Xi-MSFT 16,451 Reputation points
    2021-09-10T10:06:09.487+00:00

    Hi @chong

    From this MS doc, this Value(PROCESS_TRUST_LABEL_SECURITY_INFORMATION) does not have Access, so it should be left unused.
    It is not displayed in the security tab of the file properties and cannot be easily deleted.
    Finally, this is a question about the unclear description of the page. You can click the "feedback" at the end of the document to give feedback

    Best regards,
    Seeya


    If the response is helpful, please click "Accept Answer" and upvote it, as this could help other community members looking for similar queries.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

0 additional answers

Sort by: Most helpful