Object Headers

Question 1

PointerCount

Answer 1

Contains the total number of pointers to the object, including kernel-mode references.

Question 2

HandleCount

Answer 2

Contains the number of open handles to the object

Question 3

TypeIndex

Answer 3

This value tells you what type of object you’re dealing with (e.g. process, thread, file)

Question 4

InfoMask

Answer 4

This value tells you which of the optional headers, if any, are present.

Question 5

SecurityDescriptor

Answer 5

Stores information on the security restrictions for the object, such as which users can access it for reading, writing, deleting, and so on.

Question 6

Body

Answer 6

This member is just a placeholder that represents the start of the structure contained within the object.

Question 7

_OBJECT_HEADER_CREATOR_INFO

Answer 7

Stores information on the creator of the object.

Question 8

_OBJECT_HEADER_NAME_INFO

Answer 8

Store’s the object’s name

Question 9

_OBJECT_HEADER_HANDLE_INFO

Answer 9

Maintains the data about processes with open handles to the object

Question 10

_OBJECT_HEADER_QUOTA_INFO

Answer 10

Tracks usage and resource stats.

Question 11

_OBJECT_HEADER_PROCESS_INFO

Answer 11

Identifies the owning process.