Enum WindowsObjectTypeKind

pub enum WindowsObjectTypeKind {
    ActivationObject,
    ActivityReference,
    Adapter,
    AlpcPort,
    Callback,
    Composition,
    Controller,
    CoreMessaging,
    CoverageSampler,
    CpuPartition,
    DebugObject,
    Desktop,
    Device,
    Directory,
    DmaAdapter,
    Driver,
    DxgkCompositionObject,
    DxgkDisplayManagerObject,
    DxgkSharedBundleObject,
    DxgkSharedKeyedMutexObject,
    DxgkSharedProtectedSessionObject,
    DxgkSharedResource,
    DxgkSharedSwapChainObject,
    DxgkSharedSyncObject,
    EnergyTracker,
    EtwConsumer,
    EtwRegistration,
    EtwSessionDemuxEntry,
    Event,
    File,
    FilterCommunicationPort,
    FilterConnectionPort,
    IoCompletion,
    IoCompletionReserve,
    IoRing,
    IRTimer,
    Job,
    Key,
    KeyedEvent,
    Mutant,
    NdisCmState,
    Partition,
    PcwObject,
    PowerRequest,
    Port,
    Process,
    ProcessStateChange,
    Profile,
    PsSiloContextNonPaged,
    PsSiloContextPaged,
    RawInputManager,
    RegistryTransaction,
    Section,
    Semaphore,
    Session,
    SymbolicLink,
    Thread,
    ThreadStateChange,
    Timer,
    TmEn,
    TmRm,
    TmTm,
    TmTx,
    Token,
    TpWorkerFactory,
    Type,
    UserApcReserve,
    WaitCompletionPacket,
    WindowStation,
    WmiGuid,
}

Identifies the type of a Windows kernel object.

Windows uses a object-based kernel architecture where various system resources (processes, threads, files, etc.) are represented as kernel objects. This enum identifies the different types of objects that can be encountered during introspection.

Each variant corresponds to a specific object type string used internally by the Windows kernel. For example, “Process” for process objects, “Thread” for thread objects, etc.

Variants

ActivationObject

Activation object.

Has ActivationObject type name.

ActivityReference

Activity reference object.

Has ActivityReference type name.

Adapter

Adapter object.

Represented by _ADAPTER_OBJECT structure. Has Adapter type name.

AlpcPort

ALPC Port object.

Represented by _ALPC_PORT structure. Has ALPC Port type name.

Callback

Callback object.

Has Callback type name.

Composition

Composition object.

Has Composition type name.

Controller

Controller object.

Has Controller type name.

CoreMessaging

Core messaging object.

Has CoreMessaging type name.

CoverageSampler

Coverage sampler object.

Has CoverageSampler type name.

CpuPartition

CPU partition object.

Has CpuPartition type name.

DebugObject

Debug object.

Represented by _DEBUG_OBJECT structure. Has DebugObject type name.

Desktop

Desktop object.

Has Desktop type name.

Device

Device object.

Represented by _DEVICE_OBJECT structure. Has Device type name.

Directory

Directory object.

Represented by _OBJECT_DIRECTORY structure. Has Directory type name.

DmaAdapter

DMA adapter object.

Has DmaAdapter type name.

Driver

Driver object.

Represented by _DRIVER_OBJECT structure. Has Driver type name.

DxgkCompositionObject

DX Composition object.

Has DxgkCompositionObject type name.

DxgkDisplayManagerObject

DX Display Manager object.

Has DxgkDisplayManagerObject type name.

DxgkSharedBundleObject

DX Shared Bundle object.

Has DxgkSharedBundleObject type name.

DxgkSharedKeyedMutexObject

DX Shared Keyed Mutex object.

Has DxgkSharedKeyedMutexObject type name.

DxgkSharedProtectedSessionObject

DX Shared Protected Session object.

Has DxgkSharedProtectedSessionObject type name.

DxgkSharedResource

DX Shared Resource object.

Has DxgkSharedResource type name.

DxgkSharedSwapChainObject

DX Shared Swap Chain object.

Has DxgkSharedSwapChainObject type name.

DxgkSharedSyncObject

DX Shared Sync object.

Has DxgkSharedSyncObject type name.

EnergyTracker

Energy tracker object.

Has EnergyTracker type name.

EtwConsumer

ETW consumer object.

Has EtwConsumer type name.

EtwRegistration

ETW registration object.

Has EtwRegistration type name.

EtwSessionDemuxEntry

ETW session demux entry object.

Has EtwSessionDemuxEntry type name.

Event

Event object.

Represented by _KEVENT structure. Has Event type name.

File

File object.

Represented by _FILE_OBJECT structure. Has File type name.

FilterCommunicationPort

Filter communication port object.

Has FilterCommunicationPort type name.

FilterConnectionPort

Filter connection port object.

Has FilterConnectionPort type name.

IoCompletion

I/O completion object.

Has IoCompletion type name.

IoCompletionReserve

I/O completion reserve object.

Has IoCompletionReserve type name.

IoRing

I/O ring object.

Has IoRing type name.

IRTimer

IR timer object.

Has IRTimer type name.

Job

Job object.

Represented by _EJOB structure. Has Job type name.

Key

Key object.

Represented by _CM_KEY_BODY structure. Has Key type name.

KeyedEvent

Keyed event object.

Has KeyedEvent type name.

Mutant

Mutant object.

Represented by _KMUTANT structure. Has Mutant type name.

NdisCmState

NDIS CM state object.

Has NdisCmState type name.

Partition

Partition object.

Has Partition type name.

PcwObject

Performance counter object.

Has PcwObject type name.

PowerRequest

Power request object.

Has PowerRequest type name.

Port

Port object.

Represented by _PORT_MESSAGE structure. Has Port type name.

Process

Process object.

Represented by _EPROCESS structure. Has Process type name.

ProcessStateChange

Process state change object.

Has ProcessStateChange type name.

Profile

Profile object.

Has Profile type name.

PsSiloContextNonPaged

Sile context (non-paged) object.

Has PsSiloContextNonPaged type name.

PsSiloContextPaged

Sile context (paged) object.

Has PsSiloContextPaged type name.

RawInputManager

Raw input manager object.

Has RawInputManager type name.

RegistryTransaction

Registry transaction object.

Has RegistryTransaction type name.

Section

Section object.

Represented by _SECTION (or _SECTION_OBJECT) structure. Has Section type name.

Semaphore

Semaphore object.

Represented by _KSEMAPHORE structure. Has Semaphore type name.

Session

Session object.

Has Session type name.

SymbolicLink

Symbolic link object.

Represented by _OBJECT_SYMBOLIC_LINK structure. Has SymbolicLink type name.

Thread

Thread object.

Represented by _ETHREAD structure. Has Thread type name.

ThreadStateChange

Thread state change object.

Has ThreadStateChange type name.

Timer

Timer object.

Represented by _KTIMER structure. Has Timer type name.

TmEn

Transaction manager (Enlistment) object.

Has TmEn type name.

TmRm

Transaction manager (Resource Manager) object.

Has TmRm type name.

TmTm

Transaction manager object.

TmTx

Transaction object.

Token

Token object.

Represented by _TOKEN structure. Has Token type name.

TpWorkerFactory

Thread pool worker factory object.

Has TpWorkerFactory type name.

Type

Type object.

Represented by _OBJECT_TYPE structure. Has Type type name.

UserApcReserve

User APC reserve object.

Has UserApcReserve type name.

WaitCompletionPacket

Wait completion packet object.

Has WaitCompletionPacket type name.

WindowStation

Window station object.

Has WindowStation type name.

WmiGuid

WMI GUID object.

Has WmiGuid type name.

Trait Implementations

impl Clone for WindowsObjectTypeKind

fn clone(&self) -> WindowsObjectTypeKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WindowsObjectTypeKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromStr for WindowsObjectTypeKind

type Err = ParseObjectTypeError

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl Hash for WindowsObjectTypeKind

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for WindowsObjectTypeKind

fn eq(&self, other: &WindowsObjectTypeKind) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for WindowsObjectTypeKind

impl Eq for WindowsObjectTypeKind

impl StructuralPartialEq for WindowsObjectTypeKind