What impact does noninvasive user mode debugging with WinDbg have on the process? Will it be detectable by the process?
Of course I could imagine that if the threads are suspended, differences in execution time of a function could be detected by comparing to "usual" values.
Microsoft itself does not indicate more impact than suspending threads. Is that true?