[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYF0HIektLMKc3E9O_JieqVqfCKtiipEIAVPo0gDh4DA":3},{"article":4,"iocs":45},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":23,"category":24,"article_tags":27},"b062eb02-373d-4039-9675-6626d11c4d0a","EDR Evasion Stack Helps Process Injection Slip Past Defenses","edr-evasion-stack-helps-process-injection-slip-past-defenses-ce08fe","A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs that EDR tools typically watch out for.","A novel technique for injecting code into running processes, dubbed 'process parameter poisoning,' has been identified. This method bypasses traditional Endpoint Detection and Response (EDR) solutions by manipulating process initialization structures without invoking common Windows APIs that EDR tools monitor, making it harder to detect.","New EDR evasion technique uses process parameter poisoning for code injection.",null,"https:\u002F\u002Fwww.darkreading.com\u002Fendpoint-security\u002Fedr-evasion-stack-helps-process-injection-slip-past-defenses","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt5729777b5599bc1e\u002F6ab427662474c510d68cbd53\u002Fspecial_agent_dark_corridor-Kemter-GettyImages-503113022.jpg?width=720&quality=80&disable=upscale","2026-09-23T21:03:01+00:00","2026-09-23T22:00:38.880493+00:00",7,[18,21],{"name":19,"type":20},"EDR","technology",{"name":22,"type":20},"Windows APIs","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":11,"name":25,"slug":26},"Vulnerabilities","vulnerabilities",[28,30,35,40],{"category":29},{"id":23,"icon":11,"name":25,"slug":26},{"category":31},{"id":32,"icon":11,"name":33,"slug":34},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":36},{"id":37,"icon":11,"name":38,"slug":39},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":41},{"id":42,"icon":11,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[]]