MCPcopy Create free account
hub / github.com/TwoSevenOneT/EDR-Freeze / GetPPLProtectionLevelName

Method GetPPLProtectionLevelName

PPLHelp.cpp:24–42  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

22 return protectionLevel;
23}
24std::wstring PPLProcessCreator::GetPPLProtectionLevelName(DWORD protectionLevel)
25{
26 std::wcout << L"Protection Level: " << protectionLevel << std::endl;
27 switch (protectionLevel)
28 {
29 case PROTECTION_LEVEL_WINTCB_LIGHT:
30 return L"PROTECTION_LEVEL_WINTCB_LIGHT";
31 case PROTECTION_LEVEL_WINDOWS:
32 return L"PROTECTION_LEVEL_WINDOWS";
33 case PROTECTION_LEVEL_WINDOWS_LIGHT:
34 return L"PROTECTION_LEVEL_WINDOWS_LIGHT";
35 case PROTECTION_LEVEL_ANTIMALWARE_LIGHT:
36 return L"PROTECTION_LEVEL_ANTIMALWARE_LIGHT";
37 case PROTECTION_LEVEL_LSA_LIGHT:
38 return L"PROTECTION_LEVEL_LSA_LIGHT";
39 default:
40 return L"Unknown protection level";
41 }
42}
43DWORD PPLProcessCreator::CreatePPLProcess(DWORD protectionLevel, std::wstring& commandLine)
44{
45 SIZE_T size = 0;

Callers

nothing calls this directly

Calls

no outgoing calls

Tested by

no test coverage detected