mirror of
https://github.com/mandiant/capa.git
synced 2025-12-21 23:00:29 -08:00
linter: skip native API check for NtEnumerateSystemEnvironmentValuesEx
This commit is contained in:
@@ -570,6 +570,7 @@ class FeatureNtdllNtoskrnlApi(Lint):
|
|||||||
"ZwCreateUserProcess",
|
"ZwCreateUserProcess",
|
||||||
"RtlCreateUserProcess",
|
"RtlCreateUserProcess",
|
||||||
"NtProtectVirtualMemory",
|
"NtProtectVirtualMemory",
|
||||||
|
"NtEnumerateSystemEnvironmentValuesEx",
|
||||||
):
|
):
|
||||||
# ntoskrnl.exe does not export these routines
|
# ntoskrnl.exe does not export these routines
|
||||||
continue
|
continue
|
||||||
|
|||||||
Reference in New Issue
Block a user