On Detection, Information Security, Research, Detection Engineering.
function name. We will see later in the post that it is necessary to be specific about the function we refer to. While it is true that the majority of legitimate applications will use this “orthodox” version of the API, we’ve seen a trend among malware to use lower-level undocumented API functions