Agent Skills: detecting-process-hollowing-technique

Detect process hollowing (T1055.012) by analyzing memory-mapped sections, hollowed process indicators, and parent-child process anomalies in EDR telemetry.

UncategorizedID: plurigrid/asi/detecting-process-hollowing-technique

Author

plurigrid

https://github.com/plurigrid View all skills

Repository

plurigrid/asi

plurigridLicense: MIT

165

Install this agent skill to your local

pnpm dlx add-skill https://github.com/plurigrid/asi/detecting-process-hollowing-technique

Skill Files

Browse the full folder contents for detecting-process-hollowing-technique.

Download Skill

Loading file tree…

Select a file to preview its contents.