ATT&CK technique
View on MITRE ATT&CK →
T1055.003
Thread Execution Hijacking
StealthPrivilege Escalation
4 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential Process Injection via PowerShell | production | 2026-09-18 |
| splunk | PowerShell PInvoke Process Injection API Chain | production | 2026-06-25 |
| sigma | Remote Thread Creation In Uncommon Target Image | test | 2025-07-04 |
| sigma | HackTool - LittleCorporal Generated Maldoc Injection | test | 2023-11-28 |