ATT&CK technique
View on MITRE ATT&CK →
T1055.002
Portable Executable Injection
StealthPrivilege Escalation
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Windows Process Injection into Notepad | deprecated | 2026-09-21 |
| elastic | Suspicious .NET Reflection via PowerShell | production | 2026-09-18 |
| elastic | Potential Process Injection via PowerShell | production | 2026-09-18 |
| splunk | Windows Process Injection into Commonly Abused Processes | production | 2026-09-08 |
| splunk | Windows Process Injection Remote Thread | production | 2026-08-14 |