Search Evasion Techniques

Names, Techniques, Definitions, Keywords

Search Result

1 item(s) found so far for this keyword.

TLS Callback Anti-Debugging

Most debuggers start at the program entry point as defined by the PE header. A TLS callback can be used to execute code before the entry point and therefore run secretly in a debugger.

This technique can be used to detect that the process is being debugged and thus terminate the process instead to continue execution.

Read More