Process injection via UserAPC Queuing

/static/assets/windows-logo.svg
This TTP will launch a notepad process and queue a user-mode asynchronous procedure call, that should launch calc.exe when the thread is resumed.
locked
View Command

To view this TTPs command, you must be logged in with a professional or enterprise license.

Login

Test this TTP

Download Operator (1.7.0)