Technique Search Instance

HTTP 200 OK
Allow: GET, PUT, PATCH, DELETE, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "id": 54,
    "key": "ntqueryinformationprocess",
    "unprotect_id": "U0120,B0001.012",
    "name": "NtQueryInformationProcess",
    "description": "This function retrieves information about a running  process. Malware are able to detect if the process is currently being attached to a debugger using the `ProcessDebugPort (0x7)` information class.\r\n\r\nA nonzero value returned by the call indicates that the process is being debugged.",
    "resources": "https://msdn.microsoft.com/en-us/library/windows/desktop/ms684280(v=vs.85).aspx",
    "creation_date": "2019-03-18T13:26:52Z",
    "tags": "NtQueryInformationProcess",
    "modification_date": "2023-10-04T10:43:39.185000Z",
    "category": [
        3
    ],
    "rules": [
        79,
        86
    ],
    "attachments": [],
    "featured_api": [
        383,
        419
    ],
    "contributors": []
}