securitytabs

ATT&CK technique · T1055.011

Process Injection: Extra Window Memory Injection

Privilege EscalationStealth

Full description, procedures and detections on attack.mitre.org

Who uses it

ATT&CK groups and malware with this technique. Highlighted: in SecurityTabs news this month.

Controls that mitigate it (6)

NIST SP 800-53 rev5, grouped by family (CTID mapping).

AC · Access Control

SC · System and Communications Protection

Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial.

T1055.011: Process Injection: Extra Window Memory Injection | SecurityTabs