PSS_WALK_INFORMATION_CLASS enumeration (processsnapshot.h)

Specifies what information the PssWalkSnapshot function returns.

Syntax

typedef enum {
  PSS_WALK_AUXILIARY_PAGES = 0,
  PSS_WALK_VA_SPACE = 1,
  PSS_WALK_HANDLES = 2,
  PSS_WALK_THREADS = 3,
  PSS_WALK_THREAD_NAME
} PSS_WALK_INFORMATION_CLASS;

Constants

PSS_WALK_AUXILIARY_PAGES Value: 0 Returns a PSS_AUXILIARY_PAGE_ENTRY structure, which contains the address, page attributes and contents of an auxiliary copied page.
PSS_WALK_VA_SPACE Value: 1 Returns a PSS_VA_SPACE_ENTRY structure, which contains the MEMORY_BASIC_INFORMATION structure for every distinct VA region.
PSS_WALK_HANDLES Value: 2 Returns a PSS_HANDLE_ENTRY structure, with information specifying the handle value, its type name, object name (if captured), basic information (if captured), and type-specific information (if captured).
PSS_WALK_THREADS Value: 3 Returns a PSS_THREAD_ENTRY structure, with basic information about the thread, as well as its termination state, suspend count and Win32 start address.

Requirements

Requirement	Value
Minimum supported client	Windows 8.1 [desktop apps only]
Minimum supported server	Windows Server 2012 R2 [desktop apps only]
Header	processsnapshot.h

See also

Process Snapshotting