Detecting Process Hollowing Technique
mukul975/Anthropic-Cybersecurity-Skills
Detect process hollowing (MITRE T1055.012) by analyzing memory-mapped sections, hollowed process indicators, and parent-child anomalies using EDR telemetry, Volatility's malfind plugin, pe-sieve…
