CheckDCOtoolFiles searches the file system for defensive tools.

CheckDCOtoolProcs checks the target system for defensive-tool processes.

CheckDebugger determines if the current process is being examined in a debugger.

CheckVMfiles searches for VM associated files on the target host.

CheckVMprocs searches for VM associated processes on the target host.

CheckVMregistry queries the Windows registry for VM-associated entries.

CheckVMservices queries for VM-associated services.