Viewing the named security attributes for token in windbg (kernel mode)

64 views Asked by At

When examining the tokens in user mode windbg !token command prints the named attributes in Security Attributes Information section. E.g.

Security Attributes Information:
 00 Attribute Name: TSA://ProcUnique
    Value Type  : TOKEN_SECURITY_ATTRIBUTE_TYPE_UINT64
    Value[0]    : 496
    Value[1]    : 24531381

But when examining the token in kernel debug this information is not displayed.

How can view the named attributes for the token when debugging in kernel mode?

0

There are 0 answers