Edit

Share via

MPEXECUTION_STATUS enumeration

  • Article

Possible threat execution status.

Syntax

typedef enum tagMPEXECUTION_STATUS { 
  MP_EXECUTION_STATUS_UNKNOWN        = 0,
  MP_EXECUTION_STATUS_BLOCKED        = 1,
  MP_EXECUTION_STATUS_ALLOWED        = 2,
  MP_EXECUTION_STATUS_EXECUTING      = 3,
  MP_EXECUTION_STATUS_NOT_EXECUTING  = 4
} MPEXECUTION_STATUS, *PMPEXECUTION_STATUS;

Constants

MP_EXECUTION_STATUS_UNKNOWN

Execution status is not known.

MP_EXECUTION_STATUS_BLOCKED

Blocked from execution by mini-filter.

MP_EXECUTION_STATUS_ALLOWED

Allowed to execute by mini-filter.

MP_EXECUTION_STATUS_EXECUTING

Threat is executing.

MP_EXECUTION_STATUS_NOT_EXECUTING

Threat is not executing, and is only available from the engine during remediation.

Requirements

Requirement Value
Minimum supported client
 Windows 8 [desktop apps only]
Minimum supported server
 Windows Server 2012 [desktop apps only]
Header
MpClient.h