Unprotect_Submission icon indicating copy to clipboard operation
Unprotect_Submission copied to clipboard

added odd_thread_count technique

Open kernelwernel opened this issue 7 months ago • 0 comments

The thread count of the CPU must be an even number, which allows us to detect whether the thread count has been modified through the VM creation stage by the user. If the thread count is not an even number, this is a sign of thread tampering (with a few exceptions which are already covered).

kernelwernel avatar Jun 24 '24 14:06 kernelwernel