On Detection, Information Security, Research, Detection Engineering.
netapi32.dll into our disassembler, we find that the netapi32!NetSessionEnum function is implemented as a “forwarded export” to srvcli.dll. netapi32!NetSessionEnum implements a “forwarded export” which transparently points execution to srvcli!NetSessionEnum This means that when an application calls