Edit

BDCB_CLASSIFICATION enumeration (ntddk.h)

  • Article

The BDCB_CLASSIFICATION enumeration lists different classifications of boot start images.

Syntax

typedef enum _BDCB_CLASSIFICATION {
  BdCbClassificationUnknownImage,
  BdCbClassificationKnownGoodImage,
  BdCbClassificationKnownBadImage,
  BdCbClassificationKnownBadImageBootCritical,
  BdCbClassificationEnd
} BDCB_CLASSIFICATION, *PBDCB_CLASSIFICATION;

Constants

 
BdCbClassificationUnknownImage
The boot start image has not been inspected by anti-malware or anti-malware does not have enough information to determine whether the binary is malware.
BdCbClassificationKnownGoodImage
The boot start image has been inspected by anti-malware and found not to be malware.
BdCbClassificationKnownBadImage
The boot start image has been inspected by anti-malware and found to be malware.
BdCbClassificationKnownBadImageBootCritical
The boot start image has been inspected by anti-malware and found to be malware, but the anti-malware boot-start driver also knows it to be critical to the success of the boot.
BdCbClassificationEnd
Do not use. Reserved for future use.

Requirements

Requirement Value
Minimum supported client Available starting with Windows 8.
Header ntddk.h (include Ntddk.h)

See also

BDCB_IMAGE_INFORMATION

BOOT_DRIVER_CALLBACK_FUNCTION