list_imports
Inspect the import table grouped by DLL to identify network imports (C2), crypto imports (ransomware), and anti-debug imports (evasion).
Instructions
Get import table grouped by DLL. Network imports → C2; crypto imports → ransomware; anti-debug imports → evasion.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| module | No | Optional module name. If omitted, uses main module. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Structured result data (varies by tool) | |
| error | No | ||
| details | No | Detailed text breakdown | |
| success | Yes | ||
| summary | Yes | One-line human-readable result | |
| suggested_next_tools | No | Tools recommended to call next based on this result |