Process Hacker Discussion Forum

 
440bx
Member
Posts: 66
Joined: 02 Jul 2021 23:33

RTL_IMAGE_MITIGATION_OPTION_STATE

06 Sep 2021 19:15

ntrtl.h declares _RTL_IMAGE_MITIGATION_OPTION_STATE but, I have not been able to find an API that uses that enumeration.

What API, if any, uses it ?

Thank you for your help.
 
User avatar
dmex
Admin
Posts: 1698
Joined: 17 Jan 2011 05:43

Re: RTL_IMAGE_MITIGATION_OPTION_STATE

07 Sep 2021 06:27

It's the PolicyState and AuditState used by all those mitigation structures:
https://github.com/processhacker/proces ... 7694-L7710

PolicyState = RtlMitigationOptionStateOn
 
440bx
Member
Posts: 66
Joined: 02 Jul 2021 23:33

Re: RTL_IMAGE_MITIGATION_OPTION_STATE

07 Sep 2021 12:07

That makes sense. Thank you dmex.