Technique Search Instance

HTTP 200 OK
Allow: GET, PUT, PATCH, DELETE, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "id": 55,
    "key": "ntsetinformationthread",
    "unprotect_id": "U0119, B0001.014",
    "name": "NtSetInformationThread",
    "description": "[NtSetInformationThread](https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/nf-ntifs-ntsetinformationthread) can be used to hide threads from debuggers using the `ThreadHideFromDebugger` `ThreadInfoClass` (`0x11` / `17`). This is intended to be used by an external process, but any thread can use it on itself.\r\n\r\nAfter the thread is hidden from the debugger, it will continue running but the debugger won’t receive events related to this thread. This thread can perform anti-debugging checks such as code checksum, debug flags verification, etc.",
    "resources": "https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/content/ntddk/nf-ntddk-zwsetinformationthread\nhttps://ntquery.wordpress.com/2014/03/29/anti-debug-ntsetinformationthread/",
    "creation_date": "2019-03-18T13:27:48Z",
    "tags": "NtSetInformationThread",
    "modification_date": "2023-10-04T10:43:43.449000Z",
    "category": [
        3
    ],
    "rules": [
        78
    ],
    "attachments": [],
    "featured_api": [
        2,
        22,
        360,
        376,
        381,
        383,
        425,
        449,
        452
    ],
    "contributors": []
}