Home/ MITRE Matrix/ Defense Evasion/ T1055.002

T1055.002Portable Executable Injection

T1055.002 — Portable Executable Injection is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 4 detection use cases covering it and 1 threat-intel article citing it.

Defense EvasionPrivilege Escalation

View on the matrix → Filter Detection Library MITRE official spec ↗

4Use cases

1Articles

0Sub-techniques

2Tactics

↑ Parent technique: T1055 · Process Injection

Use cases covering this technique (4)

Windows Process Injection With Public Source Path ESCU actions · hunting P Windows Process Injection into Commonly Abused Processes ESCU actions · hunting P Windows Process Injection into Notepad ESCU actions · hunting P Windows Process Injection Remote Thread ESCU actions · alerting P

Articles citing this technique (1)

crit ESET takes part in Operation Endgame to disrupt Amadey and Stealc art-301