Wrapping Up
In this module, we demonstrated several process injection and migration techniques
We explored a typical C# injection into a local process,
as well as DLL injection into a remote process.
We also explored reflective DLL injection that did not write to disk
and used process hollowing to inject our code into a process
that is known to generate network activity.
Each of these techniques reduced our footprint on the remote system
and minimized our chances of detection by security software.
In the next module, we’ll introduce detection software into our scenario
and improve our tradecraft to evade it.