> Windows Syscalls
Back to ATT&CK index
T1134.004sub-technique

Access Token Manipulation: Parent PID Spoofing

View on attack.mitre.org

2 syscalls implement this technique