Technique Search Instance

HTTP 200 OK
Allow: GET, PUT, PATCH, DELETE, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "id": 68,
    "key": "detecting-running-process-enumprocess-api",
    "unprotect_id": "U0109,U0405,U1306",
    "name": "Detecting Running Process: EnumProcess API",
    "description": "Anti-monitoring is a technique used by malware to prevent security professionals from detecting and analyzing it. One way that malware can accomplish this is by using the `EnumProcess` function to search for specific processes, such as ollydbg.exe or wireshark.exe, which are commonly used by security professionals to monitor and analyze running processes on a system. \r\n\r\nBy detecting these processes and taking evasive action, such as terminating itself or encrypting its own code, malware can prevent security professionals from gaining visibility into its activities and disrupt their efforts to analyze it.",
    "resources": "https://msdn.microsoft.com/en-us/library/windows/desktop/ms682623(v=vs.85).aspx",
    "creation_date": "2019-03-18T13:39:38Z",
    "tags": "EnumProcess function,\r\nOllydbg.exe,\r\nWireshark.exe,\r\nMonitoring,\r\nAnalysis,",
    "modification_date": "2023-10-04T10:43:41.232000Z",
    "category": [
        1,
        3,
        6
    ],
    "rules": [
        72,
        92
    ],
    "attachments": [],
    "featured_api": [
        23,
        24
    ],
    "contributors": []
}