Major EDRs fail to flag novel process injection techniques

None of the endpoint detection and response solutions from Microsoft, SentinelOne, CrowdStrike, Cybereason, and Palo Alto Networks were able to detect or prevent eight new process injection techniques using Windows thread pools to execute malicious code dubbed "Pool Party," reports SecurityWeek.

Article Link: Major EDRs fail to flag novel process injection techniques | SC Media

1 post - 1 participant

Read full topic

alto article code crowdstrike cybereason detect detection detection and response edrs endpoint endpoint detection endpoint detection and response fail flag injection link major malicious microsoft networks novel palo palo alto palo alto networks party pool party process process injection reports response sentinelone solutions techniques windows