From 66773ce0d11c3308243a4c20aab416ad9a8df949 Mon Sep 17 00:00:00 2001 From: Mike Hunhoff Date: Fri, 8 Dec 2023 17:38:38 -0700 Subject: [PATCH] dotnet: improve debugger detection --- .../debugger-detection/check-for-debugger-via-api.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/anti-analysis/anti-debugging/debugger-detection/check-for-debugger-via-api.yml b/anti-analysis/anti-debugging/debugger-detection/check-for-debugger-via-api.yml index e82935b8..54248aed 100644 --- a/anti-analysis/anti-debugging/debugger-detection/check-for-debugger-via-api.yml +++ b/anti-analysis/anti-debugging/debugger-detection/check-for-debugger-via-api.yml @@ -25,3 +25,4 @@ rule: - api: WUDFPlatform.WudfIsKernelDebuggerPresent - api: WUDFPlatform.WudfIsUserDebuggerPresent - property/read: System.Diagnostics.Debugger::IsAttached + - api: System.Diagnostics.Debugger::IsLogging