What does "PROCESS_TRUST_LABEL_SECURITY_INFORMATION" mean?

Question

First of all, I'm sorry about my English.
I am developing a filter driver.
"PROCESS_TRUST_LABEL_SECURITY_INFORMATION" is called by Windows Defender in IRP_MJ_SET_SECURITY.
Microsoft's documentation states that this means "reserved".
I want to know the detailed meaning of "PROCESS_TRUST_LABEL_SECURITY_INFORMATION".

Answer 1

Hi @chong

From this MS doc, this Value(PROCESS_TRUST_LABEL_SECURITY_INFORMATION) does not have Access, so it should be left unused.
It is not displayed in the security tab of the file properties and cannot be easily deleted.
Finally, this is a question about the unclear description of the page. You can click the "feedback" at the end of the document to give feedback

Best regards,
Seeya

---

If the response is helpful, please click "Accept Answer" and upvote it, as this could help other community members looking for similar queries.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.