10
edits
Blocklisting/DLL: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
No edit summary |
||
| Line 46: | Line 46: | ||
|- | |- | ||
| EntryType || | | EntryType || | ||
'''DllBlocklistEntry''' | '''A11yBlocklistEntry''' | '''DllBlocklistEntry''' | '''A11yBlocklistEntry''' | '''RedirectToNoOpEntryPoint''' | ||
|- | |- | ||
| Name || A string representing a DLL's filename to block | | Name || A string representing a DLL's filename to block | ||
| Line 73: | Line 73: | ||
* '''DllBlocklistEntry'''<br />Use this EntryType unless your case matches the other EntryTypes. | * '''DllBlocklistEntry'''<br />Use this EntryType unless your case matches the other EntryTypes. | ||
* '''A11yBlocklistEntry'''<br />If you want to block a module only when it’s loaded by an accessibility application such as a screen reader, you can use this EntryType. | * '''A11yBlocklistEntry'''<br />If you want to block a module only when it’s loaded by an accessibility application such as a screen reader, you can use this EntryType. | ||
* '''RedirectToNoOpEntryPoint'''<br />If a modules is injected via Import Directory Table, adding the module as '''DllBlocklistEntry''' breaks process launch, meaning '''DllBlocklistEntry''' is not an option. You can use '''RedirectToNoOpEntryPoint''' instead. | |||
==== Name ==== | ==== Name ==== | ||