Anti-Debugging/Anti-Inspection JS in Phishing Landing Pages (F12/Contextmenu/Debugger Blanking)
Detects the presence of multiple anti-debugging and anti-analysis JavaScript techniques within HTTP response content, commonly used in phishing landing pages to prevent security analysts from inspecting the site's behavior. The rule specifically looks for combinations of event listeners for the context menu, disabling F12 developer tools, debugger timing-loop checks, and automatic 'about:blank' redirects upon pause detection.
Cortex XDR
