get_debug_directory
Retrieve PE debug directory entries, including POGO anti-tamper metadata and CODEVIEW PDB pointer, for binary analysis.
Instructions
Return the PE debug directory entries (incl. IMAGE_DEBUG_TYPE_POGO).
The POGO entry (type 10) is the third-party-ATD
layer's trigger-arming metadata (per
ANTI-TAMPER-TAXONOMY.md Pattern A-DW). Surfaced
with kind: "POGO" in the response dict. The
CODEVIEW entry (type 2) is the PDB pointer; the
canonical vendor-tag signal lives
in the RSDS CodeView stream (resolved by re-pdb
parse_pdb rather than this read-path).
The skill-side fallback references/pogo_debug_check.py
in skills/re-drm-fingerprint/ mirrors this same
shape for hosts that don't have the new MCP tool
installed.
See See the RE-AI output directory
per-target/p3r/stage5-pogo-debug-check.md for the
canonical Pattern A-DW detection pattern.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes |