Struct KernelThreadInfo 

pub struct KernelThreadInfo {
    pub pid: u32,
    pub name: String,
    pub start_fn_addr: u64,
    pub is_suspicious: bool,
    pub reason: Option<String>,
}

Information about a kernel thread extracted from memory.

Fields

pid: u32

Process ID of the kernel thread.

name: String

Thread name from task_struct.comm.

start_fn_addr: u64

Thread function pointer (threadfn) – where the thread started.

is_suspicious: bool

Whether heuristic analysis flagged this thread as suspicious.

reason: Option<String>

Human-readable reason for the suspicious flag.

Trait Implementations

impl Clone for KernelThreadInfo

fn clone(&self) -> KernelThreadInfo

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KernelThreadInfo

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for KernelThreadInfo

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.