CmdID / Techniques / T1055

T1055.012 Process Injection: Process Hollowing

Adversaries may inject malicious code into suspended and hollowed processes in order to evade process-based defenses. MITRE ATT&CK

3 Sigma rules T1055.012 on attack.mitre.org