api_lookup
Retrieve Windows API signatures, parameters, DLL, and category details from the API Monitor knowledge base, supporting wildcard patterns for forensic analysis.
Instructions
Look up Windows API definition (signature, params, DLL, category) from the API Monitor knowledge base. Supports wildcards (e.g., 'Create*').
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| api_name | Yes | API name or pattern (e.g., 'CreateFileW', 'NtCreate*') | |
| include_params | No | Include parameter details in results |