EDR Evasion Stack Helps Process Injection Slip Past Defenses

A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs that EDR tools typically watch out for.

原文标题：EDR Evasion Stack Helps Process Injection Slip Past Defenses

溯源：cii·深网监测 ｜ 可信度：B（中高（公开深网/暗网威胁情报））

信源：Dark Reading ｜ 阅读原文

A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs that EDR tools typically watch out for.

—— cii·深网监测 · 综合 · 可信度B