Hooking Detection

Hooking changes the behavior of application or system functions while the application runs, typically with dynamic instrumentation tools. It is used to bypass security checks, change application logic, or read sensitive data. In-App Protection Shielder for Apple is able to detect hooking and instrumentation tools and can be configured to terminate the application in that case.

Configuration

rasp:
  hooking:
    enabled: true
    response:
      action: terminate

Hooking detection is enabled by default and defaults to terminate. The available responses are described in RASP Feature Overview.

Read Next

• Repackaging Detection