Merge pull request mandiant#858 from mandiant/new/1208

dotnet: improve debugger detection
MBCProject · Dec 9, 2023 · 722a257 · 722a257
2 parents 4e72563 + 66773ce
commit 722a257
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/anti-analysis/anti-debugging/debugger-detection/check-for-debugger-via-api.yml b/anti-analysis/anti-debugging/debugger-detection/check-for-debugger-via-api.yml
@@ -25,3 +25,4 @@ rule:
       - api: WUDFPlatform.WudfIsKernelDebuggerPresent
       - api: WUDFPlatform.WudfIsUserDebuggerPresent
       - property/read: System.Diagnostics.Debugger::IsAttached
+      - api: System.Diagnostics.Debugger::IsLogging