check coverage of anti-profiling techniques used by ConfuserEx .NET obfuscator

[mike-hunhoff]

link: https://github.com/yck1509/ConfuserEx/blob/master/Confuser.Runtime/antinet/AntiManagedProfiler.cs

[Nitezio]

Hello @mike-hunhoff , I just opened PR #1150 for this. I took a look through the AntiManagedProfiler.cs source code to see exactly how ConfuserEx blocks analysis. Since it actively sabotages the CLR's profiling thread by forcing a timeout (ProfAPIMaxWaitForTriggerMs) and creating its own named pipe (CPFATP_) to block real attachments, I wrote a file-scope rule to flag those specific, hard-coded strings.

I am submitting this as my code contribution for my GSoC 2026 application for the capa Automated Rule Gen Agent. Looking forward to your thoughts