NtDebugActiveProcess - NtDoc

Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers 
#ifndef _NTDBG_H

NTSYSCALLAPI
NTSTATUS
NTAPI
NtDebugActiveProcess(
    _In_ HANDLE ProcessHandle,
    _In_ HANDLE DebugObjectHandle
    );

#endif

View code on GitHub
#ifndef _NTZWAPI_H

NTSYSCALLAPI
NTSTATUS
NTAPI
ZwDebugActiveProcess(
    _In_ HANDLE ProcessHandle,
    _In_ HANDLE DebugObjectHandle
    );

#endif

View code on GitHub

Function NtDebugActiveProcess is used to attach Debug Object to any non-debugged process.

ProcessHandle

HANDLE to process being debugged (opened with enough access rights

DebugObjectHandle

HANDLE to previously created Debug Object.

Documented by

See also

Edit description on GitHub