Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

The handles window in process Explorer has a column Access which supposedly determines the access rights of that particular handle. I am not able to get any documentation on how to read the flags and what each bit means. Any resource to point me in the direction would be very helpful.

share|improve this question
    
Window Handle can be accessed by anything which has access to Process Handle. About the flags I never investigated it. –  Andrew Smith Jul 19 '12 at 18:13

1 Answer 1

up vote 1 down vote accepted

I believe you can find those defined in winnt.h. (A sample winnt.h which seems to match correctly can be found included in the Wine project.) The lower 16 bits are context-dependent (eg. they are interpreted differently depending on whether the handle is for a file, a threat, a process, etc.)

The bit patterns can be further described in MSDN.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.