What attackers call, and what it leaves behind

Windows APIs seen in malware, with the telemetry each one produces and how to detect it. Plus a glossary of every term the posts use.