Skip to content

Hide Navigation Hide TOC

HackTool - PPID Spoofing SelectMyParent Tool Execution (52ff7941-8211-46f9-84f8-9903efb7077d)

Detects the use of parent process ID spoofing tools like Didier Stevens tool SelectMyParent

Cluster A Galaxy A Cluster B Galaxy B Level
HackTool - PPID Spoofing SelectMyParent Tool Execution (52ff7941-8211-46f9-84f8-9903efb7077d) Sigma-Rules Parent PID Spoofing - T1134.004 (93591901-3172-4e94-abf8-6034ab26f44a) Attack Pattern 1
Parent PID Spoofing - T1134.004 (93591901-3172-4e94-abf8-6034ab26f44a) Attack Pattern Access Token Manipulation - T1134 (dcaa092b-7de9-4a21-977f-7fcb77e89c48) Attack Pattern 2