Major EDRs fail to flag novel process injection techniques

None of the endpoint detection and response solutions from Microsoft, SentinelOne, CrowdStrike, Cybereason, and Palo Alto Networks were able to detect or prevent eight new process injection techniques using Windows thread pools to execute malicious code dubbed "Pool Party," reports SecurityWeek.

alto code crowdstrike cybereason detect detection detection and response edr edrs endpoint endpoint detection endpoint detection and response endpointdevice-security fail flag injection major malicious microsoft networks novel palo palo alto palo alto networks party pool party process process injection reports response sentinelone solutions techniques vulnerability management windows