Understanding process injection

Process injection is one of the most well-known techniques malware authors use to bypass firewalls, perform memory forensics techniques, and slow down inexperienced reverse engineers by adding malicious functionality to legitimate processes and hiding it this way. In this section, we will cover the theory behind process injection and why it is commonly used in various APT attacks nowadays.