[Anti-Analysis] Watching Memory Regions using GetWriteWatch API
I have been exploring some anti-debug techniques listed in the CheckPoint Anti-Debug Knowledge Base. This one really caught my attention. It uses the Kernel32.GetWriteWatch API to detect changes to a
m.alvar.es1 min read