Technique Search Instance

HTTP 200 OK
Allow: GET, PUT, PATCH, DELETE, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "id": 67,
    "key": "detecting-window-with-findwindow-api",
    "unprotect_id": "U0406, U0123",
    "name": "Detecting Window with FindWindow API",
    "description": "The [FindWindowA](https://docs.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-findwindowa) / [FindWindowW](https://docs.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-findwindoww) function can be used to search for windows by name or class.\r\n\r\nIt is also possible to use [EnumWindows](https://docs.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-enumwindows) API in conjunction with [GetWindowTextLength](https://docs.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-getwindowtextlengthw) and [GetWindowText](https://docs.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-getwindowtextw) to locate a piece of string that could reveal the presence of a known debugger.\r\n\r\n### Some Known Debuggers\r\n\r\n* ImmunityDebugger\r\n* OllyDbg\r\n* IDA\r\n* x64dbg / x32dbg\r\n* WinDbg",
    "resources": "https://securingtomorrow.mcafee.com/mcafee-labs/overview-malware-self-defense-protection/",
    "creation_date": "2019-03-18T13:39:00Z",
    "tags": "WinAPI,FindWindow",
    "modification_date": "2023-10-04T10:43:37.678000Z",
    "category": [
        3,
        6
    ],
    "rules": [
        82
    ],
    "attachments": [],
    "featured_api": [
        23,
        24,
        106,
        133,
        239,
        290,
        295
    ],
    "contributors": []
}