home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-detecting-process-hollowing-technique-skill-md
debuggingtools

detecting-process-hollowing-technique

Detect process hollowing (T1055.012) by analyzing memory-mapped sections, hollowed process indicators, and parent-child process anomalies in EDR telemetry.

mukul975
maintainer
mukul975
์—…๋ฐ์ดํŠธ๋จ 2026. 4. 6.
์Šคํƒ€
4240
ํฌํฌ
464
quick start

Installation and usage

Detect process hollowing (T1055.012) by analyzing memory-mapped sections, hollowed process indicators, and parent-child process anomalies in EDR telemetry.

์„ค์น˜
$ install --globalskills.sh
์‚ฌ์šฉ๋ฒ•

์„ค์น˜ ํ›„ ํ„ฐ๋ฏธ๋„์—์„œ ๋‹ค์Œ ๋ช…๋ น์„ ์‹คํ–‰ํ•˜์—ฌ ์ด ์Šคํ‚ฌ์„ ์‚ฌ์šฉํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค:

skills use detecting-process-hollowing-technique