Post #789 48 Feb 27, 2020, 16:14 UTC Parent PID Spoofinghttps://pentestlab.blog/2020/02/24/parent-pid-spoofing/ Penetration Testing Lab Parent PID Spoofing Monitoring the relationships between parent and child processes is very common technique for threat hunting teams to detect malicious activities. For example if PowerShell is the child process and …