เพื่อตัวเอง 01: Windows User Mode vs Kernel Mode
Tags
cmtmf-attack-pattern: Process Injection
attack-pattern: Direct Component Object Model - T1559.001 Credentials - T1589.001 Digital Certificates - T1596.003 Digital Certificates - T1587.003 Digital Certificates - T1588.004 Firmware - T1592.003 Hardware - T1592.001 Malware - T1587.001 Malware - T1588.001 Process Hollowing - T1055.012 Process Injection - T1631 Server - T1583.004 Server - T1584.004 Software - T1592.002 System Services - T1569 Process Hollowing - T1093 Process Injection - T1055
Show in Graph
Common Information
Type Value
UUID f9b049d2-4369-4ab1-a3a8-b4217ead9dce
Fingerprint c798193fb8e62413
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 30, 2024, 4:48 p.m.
Added to db Oct. 30, 2024, 6:06 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline เพื่อตัวเอง 01: Windows User Mode vs Kernel Mode
Title เพื่อตัวเอง 01: Windows User Mode vs Kernel Mode
Detected Hints/Tags/Attributes 60/2/10
Source URLs
Redirection Url
Details Source https://panupong-simto.medium.com/%E0%B9%80%E0%B8%9E%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%95%E0%B8%B1%E0%B8%A7%E0%B9%80%E0%B8%AD%E0%B8%87-01-windows-user-mode-vs-kernel-mode-772b623686e7?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com panupong-simto.medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 380 
notepad.exe
Details File 52 
pagefile.sys
Details File 748 
kernel32.dll
Details File 82 
kernelbase.dll
Details File 533 
ntdll.dll
Details File 119 
smss.exe
Details File 212 
winlogon.exe
Details File 478 
lsass.exe
Details File 306 
services.exe
Details File 1122 
svchost.exe