Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file
翻译 - Process Ghosting - 一种 PE 注入技术，类似于 Process Doppelgänging，但使用待删除文件而不是事务文件
C631
8 个月前
Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging
翻译 - Transacted Hollowing - 一种 PE 注入技术，混合了 ProcessHollowing 和 ProcessDoppelgänging
C520
9 个月前
A more stealthy variant of "DLL hollowing"
翻译 - “ DLL空心化”的更隐蔽的变体
C338
9 个月前