apmx_calls_around
Retrieve a window of API call records around a specific index to analyze activity immediately before and after a suspicious call.
Instructions
Get a context window of API calls around a specific record index. Returns detailed call records in the range [call_index-before, call_index+after]. Useful for understanding what happened immediately before and after a suspicious call.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| file_path | Yes | Path to .apmx64 or .apmx86 capture file | |
| call_index | Yes | The center record index to look around | |
| before | No | Number of records before the target to include | |
| after | No | Number of records after the target to include | |
| process_index | No | Which process to read (0 = first/only process) |