mirror of
https://github.com/mandiant/capa.git
synced 2025-12-21 23:00:29 -08:00
linter: skip native API check for NtEnumerateSystemEnvironmentValuesEx
This commit is contained in:
@@ -570,6 +570,7 @@ class FeatureNtdllNtoskrnlApi(Lint):
|
||||
"ZwCreateUserProcess",
|
||||
"RtlCreateUserProcess",
|
||||
"NtProtectVirtualMemory",
|
||||
"NtEnumerateSystemEnvironmentValuesEx",
|
||||
):
|
||||
# ntoskrnl.exe does not export these routines
|
||||
continue
|
||||
|
||||
Reference in New Issue
Block a user