EldoS | Feel safer!

Software components for data protection, secure storage and transfer

How do I protect my process or thread from being suspended / paused or terminated?

You need to handle OnProcessHandleOperation event. This event is fired, when some process opens a handle to your process, which you want to protect.

To prevent process termination, remove PROCESS_TERMINATE flag from AllowedAccess parameter.
To prevent process suspension, remove PROCESS_SUSPEND_RESUME flag from AllowedAccess parameter.

Use the same approach for protecting individual threads (use OnThreadHandleOperation event for this).

ProcessManager sample, included with CallbackProcess, shows how to perform these operations.

Return to the list


Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!