Added some additional protection levels.

Author: tyranid

NtApiDotNet/Win32/Win32Process.cs

@@ -207,6 +207,10 @@ struct SECURITY_CAPABILITIES
     /// </summary>
     public enum ProtectionLevel
     {
+        /// <summary>
+        /// None
+        /// </summary>
+        None = -2,
         /// <summary>
         /// Safe level as parent.
         /// </summary>
@@ -242,7 +246,11 @@ public enum ProtectionLevel
         /// <summary>
         /// Authenticode PP
         /// </summary>
-        AuthenticodePP = 7
+        AuthenticodePP = 7,
+        /// <summary>
+        /// App PPL
+        /// </summary>
+        AppPPL = 8
     }
 
     class ProcessAttributes
@@ -733,7 +741,7 @@ private SafeHGlobalBuffer GetAttributes(DisposableList<IDisposable> resources)
                 attr_list.AddAttributeBuffer(ProcessAttributes.ProcThreadAttributeWin32kFilter, resources.AddResource(filter.ToBuffer()));
             }
 
-            if ((CreationFlags & CreateProcessFlags.ProtectedProcess) != 0)
+            if ((CreationFlags & CreateProcessFlags.ProtectedProcess) != 0 && ProtectionLevel != ProtectionLevel.None)
             {
                 attr_list.AddAttribute(ProcessAttributes.ProcThreadAttributeProtectionLevel, (int)ProtectionLevel);
             }