fibratus
fibratus copied to clipboard
Obtain process token impersonation level
Description
Token information class supplied to the GetTokenInformation API calls permits consulting the process token impersonation details. More specifically, TokenType class indicates if the token is the primary/impersonated token.
References
https://learn.microsoft.com/en-us/windows/win32/api/winnt/ne-winnt-token_information_class