GetProcAddress

Medium Caution Level
25 Techniques Count
Kernel32.dll Library Name

Featured in Techniques

Technique Name Technique ID's Has Snippet(s) Has Rules(s)
NtSetInformationThread U0119 B0001.014
NtQueryObject U0118 B0001.013
CsrGetProcessID U0115
IsDebugged Flag U0113 B0001.019
NtGlobalFlag U0111 B0001.036
API Obfuscation U0217 B0032.001
DLL Injection via CreateRemoteThread and LoadLibrary U1226 E1055.001
NtSetDebugFilterState U0103
Reflective DLL injection U1224
Atom Bombing U1220
Extra Window Memory Injection U1219 E1055.011
Injection using Shims U1218 E1055.m03
Inline Hooking U1211 F0015.002
Kill Process U0403
NTFS Files Attributes U0501
Indicator Removal: Timestomp U0303 T1070.006
File Melt U1007
Detecting Online Sandbox U1338
Killing Windows Event Log U0304
Disabling Event Tracing for Windows (ETW) U0306
ProcEnvInjection - Remote code injection by abusing process environment strings U1235
Thwarting Stack-Frame Analysis U0219
Unloading Sysmon Driver U0407
Tamper DLL Export Names & GetProcAddress Spoofing U1241
Dirty Vanity U1242