#ifndef _NTDBG_H

/**
 * Attaches a debugger to an active process.
 *
 * \param ProcessHandle A handle to the process to be debugged.
 * \param DebugObjectHandle A handle to the debug object.
 * \return NTSTATUS Successful or errant status.
 * \remarks Attaches a debug object to a process and therefore changes execution/debug-event
 * behavior. The native entry rejects attaching to the caller's current process or the initial system process
 * and applies protected-process compatibility checks. Creating an unattached debug object does not test this path.
 */
_Kernel_entry_
NTSYSCALLAPI
NTSTATUS
NTAPI
NtDebugActiveProcess(
    _In_ HANDLE ProcessHandle,
    _In_ HANDLE DebugObjectHandle
    );

#endif
View code on GitHub

#ifndef _NTZWAPI_H

_Kernel_entry_
NTSYSCALLAPI
NTSTATUS
NTAPI
ZwDebugActiveProcess(
    _In_ HANDLE ProcessHandle,
    _In_ HANDLE DebugObjectHandle
    );

#endif
View code on GitHub