T1622

Debugger Evasion

discovered 2026-06-03

eBPF component kills ptrace (PTRACE_ATTACH/PTRACE_SEIZE) against hidden processes to frustrate debugging/analysis.

View on MITRE ATT&CK

Seen in packages

Campaigns