Home/ MITRE Matrix/ Defense Evasion/ T1134.004

T1134.004Parent PID Spoofing

T1134.004 — Parent PID Spoofing is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 2 detection use cases covering it.

Defense EvasionPrivilege Escalation

View on the matrix → Filter Detection Library MITRE official spec ↗

2Use cases

0Articles

0Sub-techniques

2Tactics

↑ Parent technique: T1134 · Access Token Manipulation

Use cases covering this technique (2)

Windows Parent PID Spoofing with Explorer ESCU actions · alerting P Wscript Or Cscript Suspicious Child Process ESCU actions · hunting P