aboutsummaryrefslogtreecommitdiff
path: root/Exfiltration/mimikatz-1.0/driver/notify_image.h
diff options
context:
space:
mode:
authormattifestation <mattgraeber@gmail.com>2014-02-03 17:13:35 -0500
committermattifestation <mattgraeber@gmail.com>2014-02-03 17:13:41 -0500
commitc5168cdba6a3b2d7dd8d79c8ac9583d3ace6a504 (patch)
tree31e4238db4984481442faa780e8921782c5de848 /Exfiltration/mimikatz-1.0/driver/notify_image.h
parentd9ca5357e4603222268b1c619da10cc7858153d4 (diff)
downloadPowerSploit-c5168cdba6a3b2d7dd8d79c8ac9583d3ace6a504.tar.gz
PowerSploit-c5168cdba6a3b2d7dd8d79c8ac9583d3ace6a504.zip
Removed mimikatz.
This doesn't need to reside in PowerSploit. Those that are truly paranoid should validate that the embedded executable in Invoke-Mimikatz.ps1 is indeed mimikatz. This was causing AV to flag upon downloading PowerSploit.
Diffstat (limited to 'Exfiltration/mimikatz-1.0/driver/notify_image.h')
-rw-r--r--Exfiltration/mimikatz-1.0/driver/notify_image.h10
1 files changed, 0 insertions, 10 deletions
diff --git a/Exfiltration/mimikatz-1.0/driver/notify_image.h b/Exfiltration/mimikatz-1.0/driver/notify_image.h
deleted file mode 100644
index f6e0711..0000000
--- a/Exfiltration/mimikatz-1.0/driver/notify_image.h
+++ /dev/null
@@ -1,10 +0,0 @@
-#pragma once
-#include "notify.h"
-
-#define MAX_NT_PspLoadImageNotifyRoutine 8
-
-ULONG * PspLoadImageNotifyRoutineCount;
-PVOID * PspLoadImageNotifyRoutine;
-
-NTSTATUS getPspLoadImageNotifyRoutine();
-NTSTATUS kListNotifyImages(LPWSTR pszDest, size_t cbDest, LPWSTR *ppszDestEnd, size_t *pcbRemaining);