attack.t1218.013 | Detection.FYI

Renamed Mavinject.EXE Execution
Feb 7, 2023 · attack.defense_evasion attack.privilege_escalation attack.t1055.001 attack.t1218.013 ·
Share on:
Detects the execution of a renamed version of the "Mavinject" process. Which can be abused to perform process injection using the "/INJECTRUNNING" flag

Read More
Mavinject Inject DLL Into Running Process
Dec 6, 2022 · attack.defense_evasion attack.privilege_escalation attack.t1055.001 attack.t1218.013 ·
Share on:
Detects process injection using the signed Windows tool "Mavinject" via the "INJECTRUNNING" flag

Read More