Skip to content

Detects every dll injection that involves the creation of remote threads

License

Notifications You must be signed in to change notification settings

Nort721/RemoteThreadDetection

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

RemoteThreadDetection

A Windows dll injection detection project

Target

By detecting the creation of remote threads (that isn't done by the OS) this project should detect in real-time any dll injection that in one way or another calls the NtCreateThreadEx API

Known techniques that will be detected:

  • CreateRemoteThread
  • NtCreateUserThread
  • RtlCreateUserThread
  • Reflective DLL Injection

About

Detects every dll injection that involves the creation of remote threads

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published