MalAPI.io
Contribute
FAQ
Other
Living Off Trusted Sites
Filesec.io
Security Blog
Function Name
NtOpenThread
Description
NtOpenThread is used to get a handle on a thread. This function is commonly used as part of process injection.
Library
Ntdll.dll
Associated Attacks
Injection
Documentation
https://docs.microsoft.com/en-us/windows/win32/devnotes/ntopenthread
Created: 2021-10-30
Last Update: 2021-10-30
Credits: mr.d0x