corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08784-6097-72dd-ab59-80f5a4810e6e

Process Hollowing on Windows 11 24H2

hshrzd.wordpress.com · published 26 January 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hshrzd.wordpress.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
18
Words captured
1,244

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://attack.mitre.org/techniques/T1055/012/
attack.mitre.org
https://github.com/hasherezade/libpeconv
github.com
https://github.com/hasherezade/libpeconv/issues/59
github.com
https://en.wikipedia.org/wiki/Windows_11,_version_24H2
en.wikipedia.org
CFG in Windows 11 24H2 Read at the source ↗
ynwarcs.github.io
https://ntdoc.m417z.com/memory_information_class
ntdoc.m417z.com
https://www.youtube.com/watch?v=Cch8dvp836w
youtube.com
https://github.com/hasherezade/process_doppelganging?tab=readme-ov-file
github.com
https://www.elastic.co/blog/process-ghosting-a-new-executable-image-tampering-attack
elastic.co
https://github.com/hasherezade/process_ghosting
github.com
https://github.com/jxy-s/herpaderping
github.com
https://www.malwarebytes.com/blog/news/2018/08/process-doppelganging-meets-process-hollowing_osiris
malwarebytes.com
https://github.com/hasherezade/transacted_hollowing
github.com
https://github.com/Hagrid29/herpaderply_hollowing
github.com
https://github.com/hasherezade/process_overwriting
github.com
https://github.com/hasherezade/process_overwriting/wiki
github.com
https://github.com/hasherezade/libpeconv/blob/master/run_pe/patch_ntdll.cpp
github.com
https://github.com/hasherezade/libpeconv/tree/master/run_pe
github.com