(YARA) YARA_DebuggerCheck_GlobalFlags

June 20, 2022, midnight | 2 weeks, 2 days
            rule DebuggerCheck__GlobalFlags  {
    meta:
	description = "Rule to detect NtGlobalFlags debugger check"
        author = "Thibault Seret"
        date = "2020-09-26"
    strings:
        $s1 = "NtGlobalFlags"
    condition:
        any of them
}
        

Associated Techniques

Technique Name Technique ID's Has Snippet(s)
NtGlobalFlag U0111

Comment