evasion

Documentation

Index

• func CheckDCOtoolFiles() ([]string, error)
• func CheckDCOtoolProcs() ([]string, error)
• func CheckDebugger() (syscall.Handle, error)
• func CheckVMfiles() []string
• func CheckVMprocs() ([]string, error)
• func CheckVMregistry() (string, error)
• func CheckVMservices()

Functions

func CheckDCOtoolFiles

func CheckDCOtoolFiles() ([]string, error)

CheckDCOtoolFiles searches the file system for defensive tools

func CheckDCOtoolProcs

func CheckDCOtoolProcs() ([]string, error)

CheckDCOtoolProcs checks the target system for defensive-tool processes

func CheckDebugger

func CheckDebugger() (syscall.Handle, error)

CheckDebugger determines if the current process is being examined in a debugger

func CheckVMfiles

func CheckVMfiles() []string

CheckVMfiles searches for VM associated files on the target host

func CheckVMprocs

func CheckVMprocs() ([]string, error)

CheckVMprocs searches for VM associated processes on the target host

func CheckVMregistry

func CheckVMregistry() (string, error)

CheckVMregistry queries the Windows registry for VM-associated entries

func CheckVMservices

func CheckVMservices()

CheckVMservices queries for VM-associated services