GetCurrentProcess

Low Caution Level
15 Techniques Count
Kernel32.dll Library Name

Featured in Techniques

Technique Name Technique ID's Has Snippet(s) Has Rules(s)
CheckRemoteDebuggerPresent U0121 B0001.002
NtQueryInformationProcess U0120 B0001.012
NtGlobalFlag U0111 B0001.036
Parent Process Detection U0404
DLL Injection via CreateRemoteThread and LoadLibrary U1226 E1055.001
SuspendThread U0101 C0055
Reflective DLL injection U1224
APC injection U1221 E1055.004
Atom Bombing U1220
Ctrl+Inject U1213
File Melt U1007
Detecting Online Sandbox U1338
Disabling Event Tracing for Windows (ETW) U0306
ProcEnvInjection - Remote code injection by abusing process environment strings U1235
Evasion using direct Syscalls U0521