diff --git a/include/ntapi/nt_debug.h b/include/ntapi/nt_debug.h index 3e11193..9f90f7e 100644 --- a/include/ntapi/nt_debug.h +++ b/include/ntapi/nt_debug.h @@ -225,6 +225,9 @@ typedef enum _nt_dbg_fltr_type { #define NT_DBG_FLOW_MASK_DLL_LOAD (1 << NT_DBG_STATE_DLL_LOAD) #define NT_DBG_FLOW_MASK_DLL_UNLOAD (1 << NT_DBG_STATE_DLL_UNLOAD) +#define NT_DBG_FLOW_MASK_EXECUTION_TREE (0x10000000) +#define NT_DBG_FLOW_MASK_DETACH_AND_CLOSE (0x20000000) + /* debug events */ typedef struct _nt_dbg_km_thread_exit {