You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
- Check Disk / RAM (If disk size is less than 100GB, exit; and if RAM size is less than 6GB, exit).
44
+
- Flags and artifacts.
45
+
- Execution time is lame, but I guess it can be added as well.
46
+
- Hiding threads through (NtSetInformationThread).
47
+
- Theres probably more, but i cant think of any right now.
48
+
49
+
42
50
### Quick Nutshell
43
51
44
52
- Detects most anti-anti-debugging hooking methods on common anti-debugging functions by checking for bad instructions on function addresses (most effective on x64). It also detects user-mode anti-anti-debuggers like ScyllaHide and can detect some sandboxes that use hooking to monitor application behavior/activity (like [Tria.ge](https://tria.ge/)).
0 commit comments