> For the complete documentation index, see [llms.txt](https://malfav.gitbook.io/home/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://malfav.gitbook.io/home/os-internals/suspicious-apis.md).

# Suspicious API's

In the context of Windows malware analysis and cybersecurity, **"suspicious APIs"** refer to Application Programming Interfaces (APIs) that are often associated with malicious activity or can be used in ways that might indicate the presence of malware. Monitoring and analyzing these APIs can help identify potentially malicious behavior or uncover malicious activities.