BDCB_CLASSIFICATION enumeration (ntddk.h)

The BDCB_CLASSIFICATION enumeration lists different classifications of boot start images.

Syntax

typedef enum _BDCB_CLASSIFICATION {
  BdCbClassificationUnknownImage,
  BdCbClassificationKnownGoodImage,
  BdCbClassificationKnownBadImage,
  BdCbClassificationKnownBadImageBootCritical,
  BdCbClassificationEnd
} BDCB_CLASSIFICATION, *PBDCB_CLASSIFICATION;

Constants

BdCbClassificationUnknownImage The boot start image has not been inspected by anti-malware or anti-malware does not have enough information to determine whether the binary is malware.
BdCbClassificationKnownGoodImage The boot start image has been inspected by anti-malware and found not to be malware.
BdCbClassificationKnownBadImage The boot start image has been inspected by anti-malware and found to be malware.
BdCbClassificationKnownBadImageBootCritical The boot start image has been inspected by anti-malware and found to be malware, but the anti-malware boot-start driver also knows it to be critical to the success of the boot.
BdCbClassificationEnd Do not use. Reserved for future use.

Requirements

Requirement	Value
Minimum supported client	Available starting with Windows 8.
Header	ntddk.h (include Ntddk.h)

See also

BDCB_IMAGE_INFORMATION

BOOT_DRIVER_CALLBACK_FUNCTION