Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
#ifndef _NTRTL_H
#define RTL_USER_PROC_SECURE_PROCESS 0x80000000 // Process is secure (Windows 11+); rejected by current kernel capture validation path
#endif
View code on GitHub