Min version2003/XP64 SP1
Max version10 TH2
x64 offset
offset:bitpos
Field Name
0x0000void *
ClientToken
0x0008enum _SECURITY_IMPERSONATION_LEVEL
ImpersonationLevel
0x0010void *
PrimaryToken
0x0018void *
ProcessAuditId