Debugger Detection and Registry Persistence via IFEO or AeDebug
Detects potential debugger detection evasion attempts via command line arguments associated with debugging checks or process execution of debugging utilities, as well as persistence configuration using Image File Execution Options (IFEO) or AeDebug registry keys targeting debuggers.
Microsoft Sentinel (KQL)
