CmdID

CmdID / Techniques / T1055

T1055.009 Process Injection: Proc Memory

Adversaries may inject malicious code into processes via the /proc filesystem in order to evade process-based defenses as well as possibly elevate privileges. MITRE ATT&CK

1 program on CmdID 1 Sigma rule T1055.009 on attack.mitre.org

Part of

MITRE ATT&CK
T1055Process Injection

Programs for it

documented by LOLBAS and GTFOBins, or named by its rules

Sigma rules tagged with it

process creation, the highest levels first