New version of Sysinternals released, Process Hollowing detection added in Sysmon, new registry access detection added to Procmon https://docs.microsoft.com/en-us/sysinternals/
Handler on Duty: Didier Stevens
Threat Level: green
Comments