mirror of
https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git
synced 2026-08-04 09:41:40 +02:00
Add Layer 5: Debugger Detection to README
Added section on debugger detection and its importance.
This commit is contained in:
@@ -87,4 +87,10 @@ the system reports less than 4GB, the soldier suspects a resource starved sandbo
|
||||
|
||||

|
||||
|
||||
Layer 5: Debugger Detection
|
||||
|
||||
The soldier now checks its immediate surroundings. It uses a simple but effective Windows API call—IsDebuggerPresent—to determine if it is being run under the control of a debugger. A debugger is like a microscope; if one is present, it means someone is watching the soldier's every instruction. The soldier will not perform under such surveillance.
|
||||
|
||||

|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user