← Back to ATT&CK index
T1497.003sub-technique
Time Based Evasion
View on attack.mitre.org →3 syscalls implement this technique
- NtQueryPerformanceCounter
Returns the current value of the high-resolution performance counter and optionally its frequency.
- NtDelayExecution
Suspends the calling thread for a specified interval, optionally in an alertable state.
- NtQuerySystemTime
Returns the current system time as a 64-bit count of 100-ns intervals since 1601-01-01 UTC.