http://dhdh1.springnote.com/pages/3299025
- PEB.BeingDebugged Flag: IsDebuggerPresent()
- PEB.NtGlobalFlag,Heap.HeapFlags,Heap.ForceFlags
- CheckRemoteDebuggerPresent() / NtQueryInformationProcess()
- Debugger Interrupts
- Timing Check
- SeDebugPrivilege
- Parent Process
- NtQueryObject
- Debugger Windows Search
- Debugger Process Search
- Device Driver 이름으로 검색
- OllyDbg:Guard Pages
- Checksum
- Garbage Code And Code Permutation
- Anti-Disassembly
- Misdirection and Stopping Execution via Exception
- Blocking Input
- ThreadHideFromDebugger
- Unhandled Exception Filter
- OutputDebugString()
- Process Injection
- Debugger Blocker
- TLS Callbacks
- Stolen Byte
- API Redirection
- Multi-Threaded Packer
- Virtual Machines
밑에 정리된게 조금 중복된거 같아도 이거 공부하면 꽤 도움이 될 듯 합니다. 하나하나~
