Hallo,
as the include and exclude lists for relay logging are initialized later than our ntdll is loader, relay logs contain all ntdll calls, even if the user didn't request them. Does anybody have an idea how to make the ntdll relay behave better?
Bye