cuckoobox/community — pull request #1 by MBradbury (2012-08-06 15:32:35+00:00)
Title: Add signatures that detect usages of certain Win32 APIs

The majority of these groups of APIs were obtained from an academic paper (referenced in the signatures).
The rest were obtains by looking at Microsoft's lists of APIs and their different groups.