Commit 2dc62929 authored by Aleksey R.'s avatar Aleksey R.

real data

parent 318f0f51
# ioam
Required access masks ([ACCESS_MASK](https://docs.microsoft.com/windows/desktop/secauthz/access-mask)) for system calls: [NtQueryInformationFile](#ntqueryinformationfile), NtSetInformationFile, NtQueryVolumeInformationFile, NtSetVolumeInformationFile.
# NtQueryInformationFile
| | 5.1.2600.0 | 5.2.3790.1830 | test png |
| --- | --- | --- | --- |
| FileBasicInformation (= 4) | `#FF0000`FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | ![X](deny_rd_cr.png) |
# ioam
Required access masks (ACCESS_MASK) for system calls: [NtQueryInformationFile](#ntqueryinformationfile), [NtSetInformationFile](ntsetinformationfile), [NtQueryVolumeInformationFile](ntqueryvolumeinformationfile), [NtSetVolumeInformationFile](ntsetvolumeinformationfile).
# NtQueryInformationFile
| | 5.1.2600.0 | 6.1.7601.17514 | 10.0.16299.15 | |
| --- | --- | --- | --- | --- |
| FileBasicInformation(=4) | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FileBasicInformation(=4) |
| FileStandardInformation(=5) | 0 | 0 | 0 | FileStandardInformation(=5) |
| FileInternalInformation(=6) | 0 | 0 | 0 | FileInternalInformation(=6) |
| FileEaInformation(=7) | 0 | 0 | 0 | FileEaInformation(=7) |
| FileAccessInformation(=8) | 0 | 0 | 0 | FileAccessInformation(=8) |
| FileNameInformation(=9) | 0 | 0 | 0 | FileNameInformation(=9) |
| FilePositionInformation(=14) | 0 | 0 | 0 | FilePositionInformation(=14) |
| FileModeInformation(=16) | 0 | 0 | 0 | FileModeInformation(=16) |
| FileAlignmentInformation(=17) | 0 | 0 | 0 | FileAlignmentInformation(=17) |
| FileAllInformation(=18) | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FileAllInformation(=18) |
| FileAlternateNameInformation(=21) | 0 | 0 | 0 | FileAlternateNameInformation(=21) |
| FileStreamInformation(=22) | 0 | 0 | 0 | FileStreamInformation(=22) |
| FilePipeInformation(=23) | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FilePipeInformation(=23) |
| FilePipeLocalInformation(=24) | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FilePipeLocalInformation(=24) |
| FilePipeRemoteInformation(=25) | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FilePipeRemoteInformation(=25) |
| FileMailslotQueryInformation(=26) | 0 | 0 | 0 | FileMailslotQueryInformation(=26) |
| FileCompressionInformation(=28) | 0 | 0 | 0 | FileCompressionInformation(=28) |
| FileObjectIdInformation(=29) | 0 | 0 | 0 | FileObjectIdInformation(=29) |
| FileQuotaInformation(=32) | 0 | 0 | 0 | FileQuotaInformation(=32) |
| FileReparsePointInformation(=33) | 0 | 0 | 0 | FileReparsePointInformation(=33) |
| FileNetworkOpenInformation(=34) | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FileNetworkOpenInformation(=34) |
| FileAttributeTagInformation(=35) | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FileAttributeTagInformation(=35) |
| FileIoCompletionNotificationInformation(=41) | | ![A](plus_green.png)FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FileIoCompletionNotificationInformation(=41) |
| FileIoPriorityHintInformation(=43) | | ![A](plus_green.png)FILE_READ_DATA | FILE_READ_DATA | FileIoPriorityHintInformation(=43) |
| FileSfioReserveInformation(=44) | | ![A](plus_green.png)FILE_READ_DATA | FILE_READ_DATA | FileSfioReserveInformation(=44) |
| FileSfioVolumeInformation(=45) | | ![A](plus_green.png)FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FileSfioVolumeInformation(=45) |
| FileHardLinkInformation(=46) | | ![A](plus_green.png)0 | 0 | FileHardLinkInformation(=46) |
| FileProcessIdsUsingFileInformation(=47) | | ![A](plus_green.png)FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FileProcessIdsUsingFileInformation(=47) |
| FileNormalizedNameInformation(=48) | | ![A](plus_green.png)0 | 0 | FileNormalizedNameInformation(=48) |
| FileNetworkPhysicalNameInformation(=49) | | ![A](plus_green.png)0 | 0 | FileNetworkPhysicalNameInformation(=49) |
| FileIsRemoteDeviceInformation(=51) | | ![A](plus_green.png)FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FileIsRemoteDeviceInformation(=51) |
| FileUnusedInformation/FileAttributeCacheInformation(=52) | | ![A](plus_green.png)FILE_READ_ATTRIBUTES | ![X](deny_rd_cr.png) | FileUnusedInformation/FileAttributeCacheInformation(=52) |
| FileNumaNodeInformation(=53) | | ![A](plus_green.png)0 | 0 | FileNumaNodeInformation(=53) |
| FileStandardLinkInformation(=54) | | ![A](plus_green.png)0 | 0 | FileStandardLinkInformation(=54) |
| FileRemoteProtocolInformation(=55) | | ![A](plus_green.png)0 | 0 | FileRemoteProtocolInformation(=55) |
| FileVolumeNameInformation(=58) | | | ![A](plus_green.png)0 | FileVolumeNameInformation(=58) |
| FileIdInformation(=59) | | | ![A](plus_green.png)0 | FileIdInformation(=59) |
| FileHardLinkFullIdInformation(=62) | | | ![A](plus_green.png)0 | FileHardLinkFullIdInformation(=62) |
| FileDesiredStorageClassInformation(=67) | | | ![A](plus_green.png)FILE_READ_ATTRIBUTES | FileDesiredStorageClassInformation(=67) |
| FileStatInformation(=68) | | | ![A](plus_green.png)0 | FileStatInformation(=68) |
| | 5.1.2600.0 | 6.1.7601.17514 | 10.0.16299.15 | |
# NtSetInformationFile
| | 5.1.2600.0 | 6.1.7601.17514 | 10.0.16299.15 | |
| --- | --- | --- | --- | --- |
| FileBasicInformation(=4) | FILE_WRITE_ATTRIBUTES | FILE_WRITE_ATTRIBUTES | FILE_WRITE_ATTRIBUTES | FileBasicInformation(=4) |
| FileRenameInformation(=10) | DELETE | DELETE | DELETE | FileRenameInformation(=10) |
| FileLinkInformation(=11) | 0 | 0 | 0 | FileLinkInformation(=11) |
| FileDispositionInformation(=13) | DELETE | DELETE | DELETE | FileDispositionInformation(=13) |
| FilePositionInformation(=14) | 0 | 0 | 0 | FilePositionInformation(=14) |
| FileModeInformation(=16) | 0 | 0 | 0 | FileModeInformation(=16) |
| FileAllocationInformation(=19) | FILE_WRITE_DATA | FILE_WRITE_DATA | FILE_WRITE_DATA | FileAllocationInformation(=19) |
| FileEndOfFileInformation(=20) | FILE_WRITE_DATA | FILE_WRITE_DATA | FILE_WRITE_DATA | FileEndOfFileInformation(=20) |
| FilePipeInformation(=23) | FILE_WRITE_ATTRIBUTES | FILE_WRITE_ATTRIBUTES | FILE_WRITE_ATTRIBUTES | FilePipeInformation(=23) |
| FilePipeRemoteInformation(=25) | FILE_WRITE_ATTRIBUTES | FILE_WRITE_ATTRIBUTES | FILE_WRITE_ATTRIBUTES | FilePipeRemoteInformation(=25) |
| FileMailslotSetInformation(=27) | 0 | 0 | 0 | FileMailslotSetInformation(=27) |
| FileObjectIdInformation(=29) | 0 | 0 | 0 | FileObjectIdInformation(=29) |
| FileCompletionInformation(=30) | 0 | 0 | 0 | FileCompletionInformation(=30) |
| FileMoveClusterInformation(=31) | FILE_WRITE_DATA | FILE_WRITE_DATA | FILE_WRITE_DATA | FileMoveClusterInformation(=31) |
| FileQuotaInformation(=32) | 0 | 0 | 0 | FileQuotaInformation(=32) |
| FileTrackingInformation(=36) | FILE_WRITE_DATA | FILE_WRITE_DATA | FILE_WRITE_DATA | FileTrackingInformation(=36) |
| FileValidDataLengthInformation(=39) | FILE_WRITE_DATA | FILE_WRITE_DATA | FILE_WRITE_DATA | FileValidDataLengthInformation(=39) |
| FileShortNameInformation(=40) | DELETE | DELETE | DELETE | FileShortNameInformation(=40) |
| FileIoCompletionNotificationInformation(=41) | | ![A](plus_green.png)0 | 0 | FileIoCompletionNotificationInformation(=41) |
| FileIoStatusBlockRangeInformation(=42) | | ![A](plus_green.png)0 | 0 | FileIoStatusBlockRangeInformation(=42) |
| FileIoPriorityHintInformation(=43) | | ![A](plus_green.png)0 | 0 | FileIoPriorityHintInformation(=43) |
| FileSfioReserveInformation(=44) | | ![A](plus_green.png)0 | 0 | FileSfioReserveInformation(=44) |
| FileUnusedInformation/FileAttributeCacheInformation(=52) | | ![A](plus_green.png)FILE_READ_ATTRIBUTES | ![X](deny_rd_cr.png) | FileUnusedInformation/FileAttributeCacheInformation(=52) |
| FileReplaceCompletionInformation(=61) | | | ![A](plus_green.png)0 | FileReplaceCompletionInformation(=61) |
| FileDispositionInformationEx(=64) | | | ![A](plus_green.png)DELETE | FileDispositionInformationEx(=64) |
| FileRenameInformationEx(=65) | | | ![A](plus_green.png)DELETE | FileRenameInformationEx(=65) |
| FileDesiredStorageClassInformation(=67) | | | ![A](plus_green.png)FILE_WRITE_ATTRIBUTES | FileDesiredStorageClassInformation(=67) |
| FileMemoryPartitionInformation(=69) | | | ![A](plus_green.png)0 | FileMemoryPartitionInformation(=69) |
| | 5.1.2600.0 | 6.1.7601.17514 | 10.0.16299.15 | |
# NtQueryVolumeInformationFile
| | 5.1.2600.0 | 6.1.7601.17514 | 10.0.16299.15 | |
| --- | --- | --- | --- | --- |
| FileFsVolumeInformation(=1) | 0 | 0 | 0 | FileFsVolumeInformation(=1) |
| FileFsSizeInformation(=3) | 0 | 0 | 0 | FileFsSizeInformation(=3) |
| FileFsDeviceInformation(=4) | 0 | 0 | 0 | FileFsDeviceInformation(=4) |
| FileFsAttributeInformation(=5) | 0 | 0 | 0 | FileFsAttributeInformation(=5) |
| FileFsControlInformation(=6) | FILE_READ_DATA | FILE_READ_DATA | FILE_READ_DATA | FileFsControlInformation(=6) |
| FileFsFullSizeInformation(=7) | 0 | 0 | 0 | FileFsFullSizeInformation(=7) |
| FileFsObjectIdInformation(=8) | 0 | 0 | 0 | FileFsObjectIdInformation(=8) |
| FileFsDriverPathInformation(=9) | 0 | 0 | 0 | FileFsDriverPathInformation(=9) |
| FileFsVolumeFlagsInformation(=10) | | ![A](plus_green.png)FILE_READ_ATTRIBUTES | FILE_READ_ATTRIBUTES | FileFsVolumeFlagsInformation(=10) |
| FileFsSectorSizeInformation(=11) | | | ![A](plus_green.png)0 | FileFsSectorSizeInformation(=11) |
| FileFsDataCopyInformation(=12) | | | ![A](plus_green.png)0 | FileFsDataCopyInformation(=12) |
| FileFsMetadataSizeInformation(=13) | | | ![A](plus_green.png)0 | FileFsMetadataSizeInformation(=13) |
| | 5.1.2600.0 | 6.1.7601.17514 | 10.0.16299.15 | |
# NtSetVolumeInformationFile
| | 5.1.2600.0 | 6.1.7601.17514 | 10.0.16299.15 | |
| --- | --- | --- | --- | --- |
| FileFsLabelInformation(=2) | FILE_WRITE_DATA | FILE_WRITE_DATA | FILE_WRITE_DATA | FileFsLabelInformation(=2) |
| FileFsControlInformation(=6) | FILE_WRITE_DATA | FILE_WRITE_DATA | FILE_WRITE_DATA | FileFsControlInformation(=6) |
| FileFsObjectIdInformation(=8) | FILE_WRITE_DATA | FILE_WRITE_DATA | FILE_WRITE_DATA | FileFsObjectIdInformation(=8) |
| FileFsVolumeFlagsInformation(=10) | | ![A](plus_green.png)FILE_WRITE_ATTRIBUTES | FILE_WRITE_ATTRIBUTES | FileFsVolumeFlagsInformation(=10) |
| | 5.1.2600.0 | 6.1.7601.17514 | 10.0.16299.15 | |
# How to generate README.md
```
> python ioam.py
```
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment