explainx.ainewsletter3.4k
tag

mitre-t1055▌

1 indexed skills · max 10 per page

skills (1)

detecting-t1055-process-injection-with-sysmon

mukul975/Anthropic-Cybersecurity-Skills · detecting-t1055-process-injection-with-sysmon

0

Detect process injection techniques (T1055) including classic DLL injection, process hollowing, and APC injection by analyzing Sysmon events for cross-process memory operations, remote thread creation, and anomalous DLL loading patterns.