NVIDIA DOCA SDK Data Center on a Chip Framework Documentation
doca_apsh_attr.h
Go to the documentation of this file.
1 /*
2  * Copyright (c) 2021 NVIDIA CORPORATION & AFFILIATES, ALL RIGHTS RESERVED.
3  *
4  * This software product is a proprietary product of NVIDIA CORPORATION &
5  * AFFILIATES (the "Company") and all right, title, and interest in and to the
6  * software product, including all associated intellectual property rights, are
7  * and shall remain exclusively with the Company.
8  *
9  * This software product is governed by the End User License Agreement
10  * provided with the software product.
11  *
12  */
13 
25 #ifndef _DOCA_APSH_ATTR__H_
26 #define _DOCA_APSH_ATTR__H_
27 
28 #include <stdint.h>
29 #include <stdbool.h>
30 
31 #ifdef __cplusplus
32 extern "C" {
33 #endif
34 
41 };
42 
66 };
67 
69 typedef struct doca_dev *DOCA_APSH_DMA_DEV_TYPE;
77 typedef struct doca_dev_rep *DOCA_APSH_VHCA_ID_TYPE;
104 
122 };
123 
125 typedef uint32_t DOCA_APSH_PROCESS_PID_TYPE;
129 typedef const char *DOCA_APSH_PROCESS_COMM_TYPE;
150 
163 };
164 
166 typedef uint32_t DOCA_APSH_THREAD_PID_TYPE;
168 typedef uint32_t DOCA_APSH_THREAD_TID_TYPE;
181 
194 };
195 
197 typedef uint32_t DOCA_APSH_LIB_PID_TYPE;
208 
223 };
224 
226 typedef uint32_t DOCA_APSH_VMA_PID_TYPE;
228 typedef uint64_t DOCA_APSH_VMA_OFFSET_TYPE;
230 typedef const char *DOCA_APSH_VMA_PROTECTION_TYPE;
234 typedef uint64_t DOCA_APSH_VMA_VM_END_TYPE;
238 typedef const char *DOCA_APSH_VMA_FILE_PATH_TYPE;
244 typedef const char *DOCA_APSH_VMA_WINDOWS_TAG_TYPE;
245 
260 };
261 
282 
290 };
291 
295 typedef const char *DOCA_APSH_MODULES_NAME_TYPE;
298 
314 };
315 
319 typedef const char *DOCA_APSH_PRIVILEGES_NAME_TYPE;
328 
337 };
338 
340 typedef uint32_t DOCA_APSH_ENVARS_PID_TYPE;
342 typedef const char *DOCA_APSH_ENVARS_VARIABLE_TYPE;
344 typedef const char *DOCA_APSH_ENVARS_VALUE_TYPE;
347 
360 };
361 
378 
389 };
390 
392 typedef uint32_t DOCA_APSH_HANDLE_PID_TYPE;
398 typedef const char *DOCA_APSH_HANDLE_TYPE_TYPE;
402 typedef const char *DOCA_APSH_HANDLE_NAME_TYPE;
403 
412 };
413 
422 
430 };
431 
438 
475 };
476 
478 typedef uint32_t DOCA_APSH_NETSCAN_PID_TYPE;
480 typedef const char *DOCA_APSH_NETSCAN_COMM_TYPE;
492 typedef const char *DOCA_APSH_NETSCAN_STATE_TYPE;
494 typedef const char *DOCA_APSH_NETSCAN_TIME_TYPE;
537 
552 };
553 
574 
585 };
586 
593 };
594 
604 };
605 
607 typedef uint32_t DOCA_APSH_YARA_PID_TYPE;
609 typedef const char *DOCA_APSH_YARA_COMM_TYPE;
611 typedef const char *DOCA_APSH_YARA_RULE_TYPE;
616 
629 };
630 
647 
653 };
654 
656 typedef const char *DOCA_APSH_CONTAINER_ID_TYPE;
657 
670 };
671 
688 
689 #ifdef __cplusplus
690 }
691 #endif
692 
695 #endif
uint64_t DOCA_APSH_PROCESS_LINUX_STATE_TYPE
process state type
int DOCA_APSH_VADS_LIMIT_TYPE
limit of vads number
int DOCA_APSH_ATTESTATION_PAGES_PRESENT_TYPE
attestation pages present type
uint32_t DOCA_APSH_LINUX_INTERFACE_NAMESPACE_TYPE
linux namespace
const char * DOCA_APSH_PRIVILEGES_NAME_TYPE
privilege name type
int DOCA_APSH_THREADS_LIMIT_TYPE
limit of threads number
unsigned char * DOCA_APSH_LINUX_INTERFACE_IPV4_PREFIX_LEN_ARR_TYPE
linux inteface IPV4 prefix len
uint32_t * DOCA_APSH_LINUX_INTERFACE_IPV6_PREFIX_LEN_ARR_TYPE
linux IPV6 prefix len
uint8_t DOCA_APSH_THREAD_WINDOWS_SUSPEND_COUNT_TYPE
thread suspend count type
const char * DOCA_APSH_LIB_WINDOWS_DLL_NAME_TYPE
lib dll name type
const char * DOCA_APSH_NETSCAN_LINUX_TYPE_TYPE
netscan linux connection Type
char ** DOCA_APSH_LINUX_INTERFACE_MAC_ARR_TYPE
linux interface mac address array
doca_apsh_proc_file_details_attr
doca app shield process file details attributes
uint32_t DOCA_APSH_PROCESS_SID_PID_TYPE
SID process id.
uint64_t DOCA_APSH_PROCESS_CPU_TIME_TYPE
process cpu time type
uint32_t DOCA_APSH_LIB_PID_TYPE
lib pid type
uint64_t DOCA_APSH_ENVARS_WINDOWS_BLOCK_TYPE
envars windows block address type
uint32_t DOCA_APSH_PROCESS_WINDOWS_THREADS_TYPE
process threads type
uint64_t DOCA_APSH_HANDLE_VALUE_TYPE
handle value type
char * DOCA_APSH_OS_SYMBOL_MAP_TYPE
os symbol map path
enum doca_apsh_system_os DOCA_APSH_OS_TYPE_TYPE
os type
doca_apsh_interface_attr
doca app shield interface attributes
uint32_t DOCA_APSH_SCAN_WIN_SIZE_TYPE
yara scan window size
const char * DOCA_APSH_PROCESS_PARAMETERS_CMD_LINE_TYPE
process-parameters command line
uint32_t DOCA_APSH_ATTESTATION_PID_TYPE
attestation pid type
const char * DOCA_APSH_ENVARS_VARIABLE_TYPE
envars variable type
uint32_t DOCA_APSH_PROCESS_SID_ATTRIBUTES_TYPE
SID attributes flag.
doca_apsh_envar_attr
doca app shield envars attributes
uint32_t DOCA_APSH_NETSCAN_LINUX_TCP_SEGS_IN_TYPE
netscan linux connection TCP segments in
int DOCA_APSH_LIBS_LIMIT_TYPE
limit of libs number
const char * DOCA_APSH_INJECTION_DETECT_VAD_TAG_TYPE
injection detect VAD pool tag type
const char * DOCA_APSH_ATTESTATION_PROTECTION_TYPE
attestation protection type
uint64_t DOCA_APSH_PROCESS_WINDOWS_OFFSET_TYPE
process offset type
bool DOCA_APSH_ATTESTATION_HASH_DATA_IS_PRESENT_TYPE
attestation hash data is present type
const char * DOCA_APSH_NETSCAN_LOCAL_ADDR_TYPE
netscan connection local address
uint64_t DOCA_APSH_HANDLE_ACCESS_TYPE
handle access type
const char * DOCA_APSH_PROCESS_FILE_DETAILS_PATH_TYPE
process file details path type
uint32_t DOCA_APSH_NETSCAN_LINUX_INTERFACE_IPV4_ARR_SIZE_TYPE
netscan linux interface IPV4 array size
doca_apsh_privilege_attr
doca app shield privileges attributes windows privilege list can be found on: https://docs....
doca_apsh_lib_attr
doca app shield lib attributes
uint32_t DOCA_APSH_PROCESS_LINUX_NS_NET_TYPE
process network namespace type
uint64_t DOCA_APSH_ATTESTATION_START_ADDRESS_TYPE
attestation start address type
const char * DOCA_APSH_HANDLE_NAME_TYPE
handle name type
uint32_t DOCA_APSH_NETSCAN_LINUX_INTERFACE_MAC_ARR_SIZE_TYPE
netscan linux interface MAC array size
doca_apsh_handle_attr
doca app shield handle attributes
bool DOCA_APSH_PRIVILEGES_WINDOWS_PRESENT_TYPE
privilege windows present type
char ** DOCA_APSH_NETSCAN_LINUX_INTERFACE_IPV4_ARR_TYPE
netscan interface IPV4 array
char ** DOCA_APSH_LINUX_INTERFACE_IPV6_ARR_TYPE
linux interface IPV6
int DOCA_APSH_HASHTEST_LIMIT_TYPE
limit of vm areas to attest
doca_apsh_netscan_attr
doca app shield netscan attributes
uint32_t DOCA_APSH_LINUX_INTERFACE_IPV4_ARR_SIZE_TYPE
linux IPV4 adrress array size
doca_apsh_ldrmodule_attr
doca app shield LDR-Modules attributes
uint32_t DOCA_APSH_NETSCAN_LINUX_TCP_SEGS_OUT_TYPE
netscan linux connection TCP segments out
doca_apsh_injection_detect_attr
doca app shield injection detect attributes
doca_apsh_vad_attr
doca app shield virtual address descriptor attributes
doca_apsh_system_config_attr
doca app shield configuration attributes
bool DOCA_APSH_LDRMODULE_WINDOWS_INLOAD_TYPE
ldrmodule inload type
const char * DOCA_APSH_MODULES_NAME_TYPE
module name type
const char * DOCA_APSH_NETSCAN_COMM_TYPE
netscan process name
uint64_t DOCA_APSH_VMA_OFFSET_TYPE
vma offset type
const char * DOCA_APSH_NETSCAN_LINUX_FAMILY_TYPE
netscan linux connection Family
uint64_t DOCA_APSH_PROCESS_WINDOWS_EXIT_TIME_TYPE
process exit time type
const char * DOCA_APSH_NETSCAN_PROTOCOL_TYPE
netscan connection protocol
const char * DOCA_APSH_LDRMODULE_LIBRARY_PATH_TYPE
ldrmodule library path type
bool DOCA_APSH_PRIVILEGES_IS_ON_TYPE
privilege is on type
uint32_t DOCA_APSH_SCAN_WIN_STEP_TYPE
yara scan window step
const char * DOCA_APSH_CONTAINER_ID_TYPE
container id type
doca_apsh_attestation_attr
doca app shield attestation attributes
const char * DOCA_APSH_YARA_RULE_TYPE
rule name
uint64_t DOCA_APSH_PROCESS_PARAMETERS_IMAGE_BASE_ADDR_TYPE
process-parameters image base address
struct doca_dev_rep * DOCA_APSH_VHCA_ID_TYPE
vhca id
uint32_t DOCA_APSH_LDRMODULE_PID_TYPE
ldrmodule pid type
char * DOCA_APSH_MEM_REGION_TYPE
memory region path
uint64_t DOCA_APSH_YARA_MATCH_WINDOW_LEN_TYPE
length of the scan window of the match
uint64_t DOCA_APSH_NETSCAN_LINUX_SOCKET_OFFSET_TYPE
netscan linux connection socket offset
bool DOCA_APSH_LDRMODULE_WINDOWS_ININIT_TYPE
ldrmodule ininit type
uint32_t DOCA_APSH_NETSCAN_LINUX_FD_TYPE
netscan linux connection file descriptor
uint64_t DOCA_APSH_VMA_VM_START_TYPE
vma vm start type
const char * DOCA_APSH_PROCESS_COMM_TYPE
process comm type
const char * DOCA_APSH_NETSCAN_LINUX_FILTER_TYPE
netscan linux connection filter
char * DOCA_APSH_KPGD_FILE_TYPE
kpgd file path
uint64_t DOCA_APSH_INJECTION_DETECT_SUSPECTED_AREA_START_TYPE
injection detect suspected area start type
char * DOCA_APSH_OS_SYMBOL_MAP_FOLDER_TYPE
os symbol map folder path
int DOCA_APSH_ATTESTATION_MATCHING_HASHES_TYPE
attestation matching hashes type
uint64_t DOCA_APSH_LIB_LOAD_ADRESS_TYPE
lib load address for both Windows and Linux
char * DOCA_APSH_NETSCAN_LINUX_INTERFACE_NAME_TYPE
netscan linux interface name
uint32_t DOCA_APSH_PROCESS_PARAMETERS_PID_TYPE
process-parameters pid
uint64_t DOCA_APSH_THREAD_STATE_TYPE
thread state type
char ** DOCA_APSH_LINUX_INTERFACE_IPV4_ARR_TYPE
linux interface IPV4
const char * DOCA_APSH_VMA_FILE_PATH_TYPE
vma file path type
char ** DOCA_APSH_NETSCAN_LINUX_INTERFACE_MAC_ARR_TYPE
netscan linux interface MAC array
doca_apsh_process_parameters_attr
doca app shield process-parameters attributes
uint32_t DOCA_APSH_PROCESS_LINUX_GID_TYPE
process gid type
const char * DOCA_APSH_ENVARS_VALUE_TYPE
envars value type
uint64_t DOCA_APSH_YARA_MATCH_WINDOW_ADDR_TYPE
virtual address of the scan window of the match
uint32_t DOCA_APSH_LIB_WINDOWS_SIZE_OF_IMAGE_TYPE
lib size of image type
uint32_t DOCA_APSH_THREAD_PID_TYPE
thread pid type
doca_apsh_yara_rule
available doca app shield yara rules
uint32_t DOCA_APSH_PROCESS_LINUX_NS_PID_TYPE
process PID namespace type
uint64_t DOCA_APSH_PROCESS_FILE_DETAILS_SIZE_TYPE
process file details file size type
const char * DOCA_APSH_ATTESTATION_PATH_OF_MEMORY_AREA_TYPE
attestation path of memory area type
uint32_t DOCA_APSH_PROCESS_PPID_TYPE
process pid type
const char * DOCA_APSH_NETSCAN_WINDOWS_TIME_TYPE
netscan windows connection creation time
const char * DOCA_APSH_LIB_LIBRARY_PATH_TYPE
lib loaded library path type
uint32_t DOCA_APSH_MODULES_SIZE_TYPE
module size type
uint64_t DOCA_APSH_NETSCAN_REMOTE_PORT_TYPE
netscan connection remote port
uint32_t DOCA_APSH_LDRMODULE_WINDOWS_SIZE_OF_IMAGE_TYPE
ldrmodule size of image type
uint64_t DOCA_APSH_THREAD_WINDOWS_OFFSET_TYPE
thread offset type
uint32_t DOCA_APSH_YARA_PID_TYPE
pid of the process
uint32_t DOCA_APSH_PROCESS_LINUX_NS_MNT_TYPE
process mount namespace type
const char * DOCA_APSH_PROCESS_FILE_DETAILS_ELF_TYPE_TYPE
process file details elf type type
uint32_t DOCA_APSH_PROCESS_PID_TYPE
process pid type
uint64_t DOCA_APSH_MODULES_OFFSET_TYPE
module offset type
const char * DOCA_APSH_NETSCAN_STATE_TYPE
netscan connection state
int DOCA_APSH_MODULES_LIMIT_TYPE
limit of modules number
const char * DOCA_APSH_INJECTION_DETECT_VAD_PROTECTION_TYPE
injection detect VAD protection type
doca_apsh_sid_attr
doca app shield SID (security identifiers) attributes
uint32_t DOCA_APSH_NETSCAN_PID_TYPE
netscan process id
uint32_t DOCA_APSH_THREAD_TID_TYPE
thread tid type
const char * DOCA_APSH_VMA_WINDOWS_TAG_TYPE
vma tag type
doca_apsh_yara_scan_type
doca app shield yara scan type bitmask
int DOCA_APSH_ATTESTATION_PAGES_NUMBER_TYPE
attestation pages number type
uint32_t DOCA_APSH_NETSCAN_LINUX_INTERFACE_IPV6_ARR_SIZE_TYPE
netscan linux interface IPV6 array size
int DOCA_APSH_FILESIZE_LIMIT_TYPE
limit of parsed files size
uint64_t DOCA_APSH_NETSCAN_LINUX_TCP_BYTES_SENT_TYPE
netscan linux connection TCP sent bytes
uint64_t DOCA_APSH_INJECTION_DETECT_VAD_START_TYPE
injection detect VAD start address type
uint64_t DOCA_APSH_NETSCAN_LOCAL_PORT_TYPE
netscan connection local port
uint32_t DOCA_APSH_ENVARS_PID_TYPE
envars pid type
uint32_t DOCA_APSH_VMA_WINDOWS_PRIVATE_MEMORY_TYPE
vma private memory type
const char * DOCA_APSH_LDRMODULE_WINDOWS_DLL_NAME_TYPE
ldrmodule windows dll name type
const char * DOCA_APSH_NETSCAN_TIME_TYPE
netscan windows connection creation time - depricated
bool DOCA_APSH_LDRMODULE_WINDOWS_INMEM_TYPE
ldrmodule inmem type
const char * DOCA_APSH_NETSCAN_REMOTE_ADDR_TYPE
netscan connection remote address
uint32_t DOCA_APSH_NETSCAN_LINUX_TCP_DATA_SEGS_IN_TYPE
netscan linux connection TCP data segments in
doca_apsh_module_attr
doca app shield module attributes
uint64_t DOCA_APSH_HANDLE_TABLE_ENTRY_TYPE
handle table entry type
uint64_t DOCA_APSH_LIB_LINUX_LOAD_ADRESS_TYPE
lib load address for Linux
uint64_t DOCA_APSH_NETSCAN_LINUX_TCP_BYTES_ACKED_TYPE
netscan linux connection TCP acknowledged bytes
int DOCA_APSH_PROCESS_LIMIT_TYPE
limit of processes number
uint32_t DOCA_APSH_PROCESS_FILE_DETAILS_PID_TYPE
process file details pid type
uint64_t DOCA_APSH_INJECTION_DETECT_VAD_END_TYPE
injection detect VAD end address type
uint32_t DOCA_APSH_INJECTION_DETECT_PID_TYPE
injection detect pid type
const char * DOCA_APSH_YARA_COMM_TYPE
name of the process
int DOCA_APSH_STRING_LIMIT_TYPE
length limit of apsh_read_str
uint64_t DOCA_APSH_LDRMODULE_BASE_ADDRESS_TYPE
ldrmodule base address type
const char * DOCA_APSH_PROCESS_FILE_DETAILS_SHA256_TYPE
process file details sha256 type
uint64_t DOCA_APSH_PROCESS_FILE_DETAILS_INODE_ADDRESS_TYPE
process file details inode address type
uint64_t DOCA_APSH_VMA_VM_END_TYPE
vma vm end type
int DOCA_APSH_WINDOWS_ENVARS_LIMIT_TYPE
length limit of envars for windows
const char * DOCA_APSH_LINUX_INTERFACE_NAME_TYPE
linux interface name
uint64_t DOCA_APSH_NETSCAN_LINUX_TCP_BYTES_RECEIVED_TYPE
netscan linux connection TCP received bytes
bool DOCA_APSH_PRIVILEGES_WINDOWS_DEFAULT_TYPE
privilege windows enabled by default type
const char * DOCA_APSH_PROCESS_PARAMETERS_IMAGE_FULL_PATH_TYPE
process-parameters image full path
bool DOCA_APSH_PRIVILEGES_WINDOWS_ENABLED_TYPE
privilege windows enabled type
doca_apsh_yara_attr
doca app shield yara attributes
uint32_t DOCA_APSH_NETSCAN_LINUX_NET_NAMESPACE_TYPE
netscan linux connection net namespace
const char * DOCA_APSH_ATTESTATION_COMM_TYPE
attestation comm type
uint8_t DOCA_APSH_THREAD_WINDOWS_WAIT_REASON_TYPE
thread wait reason type
doca_apsh_thread_attr
doca app shield thread attributes
uint64_t DOCA_APSH_INJECTION_DETECT_SUSPECTED_AREA_END_TYPE
injection detect suspected area end type
const char * DOCA_APSH_VMA_PROTECTION_TYPE
vma protection type
const char * DOCA_APSH_PROCESS_FILE_DETAILS_SHA1_TYPE
process file details sha1 type
const char * DOCA_APSH_HANDLE_TYPE_TYPE
handle type type
uint32_t DOCA_APSH_VMA_WINDOWS_COMMIT_CHARGE_TYPE
vma commit charge type
const char * DOCA_APSH_THREAD_LINUX_PROC_NAME_TYPE
thread proc name type
uint64_t DOCA_APSH_ATTESTATION_END_ADDRESS_TYPE
attestation end address type
const char * DOCA_APSH_PROCESS_SID_STRING_TYPE
SID strings.
uint32_t DOCA_APSH_LINUX_INTERFACE_IPV6_ARR_SIZE_TYPE
linux IPV6 adrress array size
uint32_t DOCA_APSH_NETSCAN_LINUX_TCP_DATA_SEGS_OUT_TYPE
netscan linux connection TCP data segments out
const char * DOCA_APSH_INJECTION_DETECT_VAD_FILE_PATH_TYPE
injection detect VAD file path type
doca_apsh_container_attr
doca app shield process attributes
uint64_t DOCA_APSH_PROCESS_FILE_DETAILS_INODE_TYPE
process file details inode number type
doca_apsh_system_os
system os types
uint32_t DOCA_APSH_VMA_PID_TYPE
vma pid type
char ** DOCA_APSH_NETSCAN_LINUX_INTERFACE_IPV6_ARR_TYPE
netscan linux interface IPV6 array
uint32_t DOCA_APSH_PRIVILEGES_PID_TYPE
privilege process pid
const char * DOCA_APSH_VMA_PROCESS_NAME_TYPE
vma file path type
uint32_t DOCA_APSH_HANDLE_PID_TYPE
handle pid type
uint32_t DOCA_APSH_PROCESS_LINUX_UID_TYPE
process uid type
struct doca_dev * DOCA_APSH_DMA_DEV_TYPE
dma dev name
uint32_t DOCA_APSH_LINUX_INTERFACE_MAC_ARR_SIZE_TYPE
linux interface mac address array size
doca_apsh_process_attr
doca app shield process attributes
const char * DOCA_APSH_THREAD_LINUX_THREAD_NAME_TYPE
thread thread name type
@ DOCA_APSH_PROCESS_FILE_DETAILS_SIZE
@ DOCA_APSH_PROCESS_FILE_DETAILS_SHA256
@ DOCA_APSH_PROCESS_FILE_DETAILS_PID
@ DOCA_APSH_PROCESS_FILE_DETAILS_SHA1
@ DOCA_APSH_PROCESS_FILE_DETAILS_ELF_TYPE
@ DOCA_APSH_PROCESS_FILE_DETAILS_INODE_ADDRESS
@ DOCA_APSH_PROCESS_FILE_DETAILS_PATH
@ DOCA_APSH_PROCESS_FILE_DETAILS_INODE
@ DOCA_APSH_LINUX_INTERFACE_IPV6_PREFIX_LEN_ARR
@ DOCA_APSH_LINUX_INTERFACE_IPV4_ARR
@ DOCA_APSH_LINUX_INTERFACE_IPV6_ARR
@ DOCA_APSH_LINUX_INTERFACE_MAC_ARR_SIZE
@ DOCA_APSH_LINUX_INTERFACE_MAC_ARR
@ DOCA_APSH_LINUX_INTERFACE_IPV4_ARR_SIZE
@ DOCA_APSH_LINUX_INTERFACE_NAME
@ DOCA_APSH_LINUX_INTERFACE_NAMESPACE
@ DOCA_APSH_LINUX_INTERFACE_IPV6_ARR_SIZE
@ DOCA_APSH_LINUX_INTERFACE_IPV4_PREFIX_LEN_ARR
@ DOCA_APSH_ENVARS_VARIABLE
@ DOCA_APSH_ENVARS_WINDOWS_BLOCK
@ DOCA_APSH_ENVARS_VALUE
@ DOCA_APSH_ENVARS_PID
@ DOCA_APSH_PRIVILEGES_IS_ON
@ DOCA_APSH_PRIVILEGES_WINDOWS_ENABLED
@ DOCA_APSH_PRIVILEGES_WINDOWS_PRESENT
@ DOCA_APSH_PRIVILEGES_PID
@ DOCA_APSH_PRIVILEGES_NAME
@ DOCA_APSH_PRIVILEGES_WINDOWS_DEFAULT
@ DOCA_APSH_LIB_LINUX_LOAD_ADRESS
@ DOCA_APSH_LIB_PID
@ DOCA_APSH_LIB_WINDOWS_SIZE_OF_IMAGE
@ DOCA_APSH_LIB_LOAD_ADRESS
@ DOCA_APSH_LIB_LIBRARY_PATH
@ DOCA_APSH_LIB_WINDOWS_DLL_NAME
@ DOCA_APSH_HANDLE_NAME
@ DOCA_APSH_HANDLE_TABLE_ENTRY
@ DOCA_APSH_HANDLE_PID
@ DOCA_APSH_HANDLE_ACCESS
@ DOCA_APSH_HANDLE_TYPE
@ DOCA_APSH_HANDLE_VALUE
@ DOCA_APSH_NETSCAN_LINUX_TCP_DATA_SEGS_IN
@ DOCA_APSH_NETSCAN_WINDOWS_TIME
@ DOCA_APSH_NETSCAN_LINUX_TCP_BYTES_ACKED
@ DOCA_APSH_NETSCAN_REMOTE_PORT
@ DOCA_APSH_NETSCAN_STATE
@ DOCA_APSH_NETSCAN_LINUX_SOCKET_OFFSET
@ DOCA_APSH_NETSCAN_LINUX_TCP_BYTES_SENT
@ DOCA_APSH_NETSCAN_LINUX_TCP_DATA_SEGS_OUT
@ DOCA_APSH_NETSCAN_LINUX_INTERFACE_IPV4_ARR_SIZE
@ DOCA_APSH_NETSCAN_LINUX_FD
@ DOCA_APSH_NETSCAN_LINUX_TCP_BYTES_RECEIVED
@ DOCA_APSH_NETSCAN_LINUX_INTERFACE_MAC_ARR_SIZE
@ DOCA_APSH_NETSCAN_LINUX_FILTER
@ DOCA_APSH_NETSCAN_LINUX_INTERFACE_NAME
@ DOCA_APSH_NETSCAN_LINUX_INTERFACE_IPV4_ARR
@ DOCA_APSH_NETSCAN_LINUX_INTERFACE_MAC_ARR
@ DOCA_APSH_NETSCAN_LINUX_INTERFACE_IPV6_ARR
@ DOCA_APSH_NETSCAN_LINUX_TCP_SEGS_IN
@ DOCA_APSH_NETSCAN_LINUX_INTERFACE_IPV6_ARR_SIZE
@ DOCA_APSH_NETSCAN_COMM
@ DOCA_APSH_NETSCAN_PROTOCOL
@ DOCA_APSH_NETSCAN_REMOTE_ADDR
@ DOCA_APSH_NETSCAN_LOCAL_PORT
@ DOCA_APSH_NETSCAN_TIME
@ DOCA_APSH_NETSCAN_LINUX_TYPE
@ DOCA_APSH_NETSCAN_LINUX_NET_NAMESPACE
@ DOCA_APSH_NETSCAN_LINUX_FAMILY
@ DOCA_APSH_NETSCAN_LINUX_TCP_SEGS_OUT
@ DOCA_APSH_NETSCAN_PID
@ DOCA_APSH_NETSCAN_LOCAL_ADDR
@ DOCA_APSH_LDRMODULE_WINDOWS_DLL_NAME
@ DOCA_APSH_LDRMODULE_WINDOWS_INMEM
@ DOCA_APSH_LDRMODULE_WINDOWS_ININIT
@ DOCA_APSH_LDRMODULE_LIBRARY_PATH
@ DOCA_APSH_LDRMODULE_BASE_ADDRESS
@ DOCA_APSH_LDRMODULE_WINDOWS_SIZE_OF_IMAGE
@ DOCA_APSH_LDRMODULE_WINDOWS_INLOAD
@ DOCA_APSH_LDRMODULE_PID
@ DOCA_APSH_INJECTION_DETECT_VAD_START
@ DOCA_APSH_INJECTION_DETECT_VAD_FILE_PATH
@ DOCA_APSH_INJECTION_DETECT_VAD_END
@ DOCA_APSH_INJECTION_DETECT_SUSPECTED_AREA_END
@ DOCA_APSH_INJECTION_DETECT_PID
@ DOCA_APSH_INJECTION_DETECT_VAD_PROTECTION
@ DOCA_APSH_INJECTION_DETECT_VAD_TAG
@ DOCA_APSH_INJECTION_DETECT_SUSPECTED_AREA_START
@ DOCA_APSH_VMA_PROCESS_NAME
@ DOCA_APSH_VMA_WINDOWS_TAG
@ DOCA_APSH_VMA_VM_END
@ DOCA_APSH_VMA_WINDOWS_PRIVATE_MEMORY
@ DOCA_APSH_VMA_WINDOWS_COMMIT_CHARGE
@ DOCA_APSH_VMA_FILE_PATH
@ DOCA_APSH_VMA_PROTECTION
@ DOCA_APSH_VMA_PID
@ DOCA_APSH_VMA_OFFSET
@ DOCA_APSH_VMA_VM_START
@ DOCA_APSH_HANDLES_LIMIT
@ DOCA_APSH_SCAN_WIN_STEP
@ DOCA_APSH_OS_SYMBOL_MAP_FOLDER
@ DOCA_APSH_LDRMODULES_LIMIT
@ DOCA_APSH_WINDOWS_ENVARS_LIMIT
@ DOCA_APSH_VADS_LIMIT
@ DOCA_APSH_MEM_REGION
@ DOCA_APSH_OS_TYPE
@ DOCA_APSH_STRING_LIMIT
@ DOCA_APSH_SCAN_WIN_SIZE
@ DOCA_APSH_VHCA_ID
@ DOCA_APSH_THREADS_LIMIT
@ DOCA_APSH_PROCESS_LIMIT
@ DOCA_APSH_OS_SYMBOL_MAP
@ DOCA_APSH_FILESIZE_LIMIT
@ DOCA_APSH_MODULES_LIMIT
@ DOCA_APSH_HASHTEST_LIMIT
@ DOCA_APSH_KPGD_FILE
@ DOCA_APSH_LIBS_LIMIT
@ DOCA_APSH_ATTESTATION_START_ADDRESS
@ DOCA_APSH_ATTESTATION_HASH_DATA_IS_PRESENT
@ DOCA_APSH_ATTESTATION_PAGES_PRESENT
@ DOCA_APSH_ATTESTATION_PAGES_NUMBER
@ DOCA_APSH_ATTESTATION_MATCHING_HASHES
@ DOCA_APSH_ATTESTATION_PROTECTION
@ DOCA_APSH_ATTESTATION_PATH_OF_MEMORY_AREA
@ DOCA_APSH_ATTESTATION_END_ADDRESS
@ DOCA_APSH_ATTESTATION_COMM
@ DOCA_APSH_ATTESTATION_PID
@ DOCA_APSH_PROCESS_PARAMETERS_IMAGE_FULL_PATH
@ DOCA_APSH_PROCESS_PARAMETERS_PID
@ DOCA_APSH_PROCESS_PARAMETERS_CMD_LINE
@ DOCA_APSH_PROCESS_PARAMETERS_IMAGE_BASE_ADDR
@ DOCA_APSH_YARA_RULE_MIMIKATZ
@ DOCA_APSH_YARA_RULE_REFLECTIVE_DLL_INJECTION
@ DOCA_APSH_YARA_RULE_HELLO_WORLD
@ DOCA_APSH_PROCESS_SID_ATTRIBUTES
@ DOCA_APSH_PROCESS_SID_STRING
@ DOCA_APSH_PROCESS_SID_PID
@ DOCA_APSH_YARA_SCAN_VMA
@ DOCA_APSH_YARA_SCAN_HEAP
@ DOCA_APSH_MODULES_SIZE
@ DOCA_APSH_MODULES_NAME
@ DOCA_APSH_MODULES_OFFSET
@ DOCA_APSH_YARA_RULE
@ DOCA_APSH_YARA_PID
@ DOCA_APSH_YARA_MATCH_WINDOW_LEN
@ DOCA_APSH_YARA_MATCH_WINDOW_ADDR
@ DOCA_APSH_YARA_COMM
@ DOCA_APSH_THREAD_LINUX_THREAD_NAME
@ DOCA_APSH_THREAD_LINUX_PROC_NAME
@ DOCA_APSH_THREAD_STATE
@ DOCA_APSH_THREAD_TID
@ DOCA_APSH_THREAD_PID
@ DOCA_APSH_THREAD_WINDOWS_WAIT_REASON
@ DOCA_APSH_THREAD_WINDOWS_SUSPEND_COUNT
@ DOCA_APSH_THREAD_WINDOWS_OFFSET
@ DOCA_APSH_CONTAINER_ID
@ DOCA_APSH_SYSTEM_WINDOWS
@ DOCA_APSH_SYSTEM_LINUX
@ DOCA_APSH_PROCESS_CPU_TIME
@ DOCA_APSH_PROCESS_WINDOWS_OFFSET
@ DOCA_APSH_PROCESS_COMM
@ DOCA_APSH_PROCESS_LINUX_UID
@ DOCA_APSH_PROCESS_WINDOWS_THREADS
@ DOCA_APSH_PROCESS_PID
@ DOCA_APSH_PROCESS_LINUX_STATE
@ DOCA_APSH_PROCESS_LINUX_NS_MNT
@ DOCA_APSH_PROCESS_PPID
@ DOCA_APSH_PROCESS_LINUX_NS_PID
@ DOCA_APSH_PROCESS_WINDOWS_EXIT_TIME
@ DOCA_APSH_PROCESS_LINUX_GID
@ DOCA_APSH_PROCESS_LINUX_NS_NET