阻止任何进程打开您的进程的句柄

阻止任何进程打开您的进程的句柄，仅允许系统打开您的进程的句柄，这样您就可以避免远程内存扫描

#include <Windows.h>
#include <stdio.h>
#include <Sddl.h>

void SetProcessSecurityDescriptor() {
    // Define a security descriptor string in SDDL format
    // The following SDDL string denies all access to the process, except for the SYSTEM account and the process owner
    LPCWSTR sddl = L"D:P"
        L"(D;OICI;GA;;;WD)"  // Deny all access to the "World" (Everyone)
        L"(A;OICI;GA;;;SY)"  // Allow all access to the "System"
        L"(A;OICI;GA;;;OW)"; // Allow all access to the process "Owner"

    PSECURITY_DESCRIPTOR securityDescriptor = nullptr;

    // Convert the SDDL string to a security descriptor
    if (!ConvertStringSecurityDescriptorToSecurityDescriptorW(sddl, SDDL_REVISION_1, &securityDescriptor, nullptr)) {
        // Handle the error
        return;
    }

    // Set the security descriptor for the process
    if (!SetKernelObjectSecurity(GetCurrentProcess(), DACL_SECURITY_INFORMATION, securityDescriptor)) {
        // Handle the error
    }

    // Free the security descriptor
    LocalFree(securityDescriptor);
}


int main() {
    printf("[PID] : %d\n", GetCurrentProcessId());
    SetProcessSecurityDescriptor();

    getchar();
    return 0;
}