hunting-for-process-injection-techniques

【效率与协作】Detect process injection techniques (T1055) including CreateRemoteThread, process hollowing, and DLL injection via Sysmon Event IDs 8 and 10 and EDR process telemetry

独立 GitHub 快照 · 自动分类 · 以原作者文档为准