[fix] !notifObject support for W10 1909 x64

gentilkiwi / mimikatz

A little tool to play with Windows security

http://blog.gentilkiwi.com/mimikatz

19.5k stars 3.74k forks source link

Open jthuraisamy opened 4 years ago

jthuraisamy commented 4 years ago

For Windows 10 1909 (x64), IoCreateDriver comes before ObCreateObjectType and does not result in a pattern match.
Changed the end address to PoCreateThermalRequest which is located after ObCreateObjectType in this version.