NtClose

Read documentation

Through official Microsoft Developer Network (MSDN).

Featured in Techniques

Technique Name Technique ID's Snippet(s) Rules(s) OS
APC injection U1221 E1055.004
Process Doppelgänging U1215