-
Notifications
You must be signed in to change notification settings - Fork 440
4.6. Ignore modules (mignore)
hasherezade edited this page Dec 28, 2021
·
2 revisions
You can define a list of modules that will be excluded from the scan:
/mignore <list_of_modules>
For example:
/mignore clr.dll;ntdll.dll
Fiddler.exe is detected as suspicious because of the clr.dll
that is patched. It is a false positive, and we want to exclude it from the scan. After using the /mignore clr.dll
, the process is marked as clean.