DC0021 OS API Execution
Calls made by a process to operating system-provided Application Programming Interfaces (APIs). These calls are essential for interacting with system resources such as memory, files, and hardware, or for performing system-level tasks. Monitoring these calls can provide insight into a process's intent, especially if the process is malicious.
01
detects techniques (103)
ATT&CK techniques this enables or maps to.
showing 20 of 103
02
source
Where this definition is published.