Chronicle V1 API - Module Google::Backstory::Process::TokenElevationType (v1.4.0)

1.4.0 (latest) 1.3.0 1.2.0 1.1.0 1.0.1 0.9.0 0.8.0 0.7.0 0.6.0 0.5.0 0.4.0 0.3.1 0.2.0 0.1.0

Reference documentation and code samples for the Chronicle V1 API module Google::Backstory::Process::TokenElevationType.

The elevation type of the process's token. See https://learn.microsoft.com/en-us/windows/win32/api/winnt/ne-winnt-token_elevation_type

Constants

UNKNOWN

value: 0
An undetermined token type.

TYPE_1

value: 1
A full token with no privileges removed or groups disabled.

TYPE_2

value: 2
An elevated token with no privileges removed or groups disabled. Used when running as administrator.

TYPE_3

value: 3
A limited token with administrative privileges removed and administrative groups disabled.