Technique Search Instance

HTTP 200 OK
Allow: GET, PUT, PATCH, DELETE, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "id": 60,
    "key": "closehandle-ntclose",
    "unprotect_id": "U0114, B0001.003",
    "name": "CloseHandle, NtClose",
    "description": "When a process is debugged, calling `NtClose` or `CloseHandle` with an invalid handle will generate a `STATUS_INVALID_HANDLE` exception.\r\n\r\nThe exception can be cached by an exception handler. If the control is passed to the exception handler, it indicates that a debugger is present.",
    "resources": "https://www.symantec.com/connect/articles/windows-anti-debug-reference\nhttps://anti-debug.checkpoint.com/techniques/object-handles.html#closehandle",
    "creation_date": "2019-03-18T13:32:34Z",
    "tags": "closehandle,ntclose",
    "modification_date": "2023-10-04T10:43:46.973000Z",
    "category": [
        3
    ],
    "rules": [
        45,
        73
    ],
    "attachments": [],
    "featured_api": [
        23
    ],
    "contributors": []
}