CmdID / Techniques

T1620 Reflective Code Loading

Adversaries may reflectively load code into a process in order to conceal the execution of malicious payloads. MITRE ATT&CK

1 Sigma rule T1620 on attack.mitre.org