diff --git a/pkg/ps/snapshotter_windows.go b/pkg/ps/snapshotter_windows.go index 872b323cc..4582516e4 100644 --- a/pkg/ps/snapshotter_windows.go +++ b/pkg/ps/snapshotter_windows.go @@ -552,7 +552,7 @@ func (s *snapshotter) Find(pid uint32) (bool, *pstypes.PS) { if err := windows.IsWow64Process(process, &isWOW64); err != nil && isWOW64 { proc.IsWOW64 = true } - if p, err := sys.QueryInformationProcess[sys.PsProtection](process, sys.ProcessProtectionInformation); err != nil && p != nil { + if p, err := sys.QueryInformationProcess[sys.PsProtection](process, sys.ProcessProtectionInformation); err == nil && p != nil { proc.IsProtected = p.IsProtected() } proc.IsPackaged = sys.IsProcessPackaged(process)