apmx_calls_around
Retrieve API call records surrounding a target index in an APMX capture to analyze events before and after a suspicious call.
Instructions
Get a context window of API calls around a specific record index. Returns detailed call records in the range [call_index-before, call_index+after]. Useful for understanding what happened immediately before and after a suspicious call.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| after | No | Number of records after the target to include | |
| before | No | Number of records before the target to include | |
| file_path | Yes | Path to .apmx64 or .apmx86 capture file | |
| call_index | Yes | The center record index to look around | |
| process_index | No | Which process to read (0 = first/only process) |