Detection of Process Injection

Technique Detected:  Process Injection | T1631

ID: DET0632
Domains: Mobile
Analytics: AN1703, AN1704
Version: 1.0
Created: 21 October 2025
Last Modified: 21 October 2025

Analytics

AN1703

Application vetting services could look for misuse of dynamic libraries.

Log Sources
Data Component Name Channel
API Calls (DC0112) Application Vetting None

AN1704

Application vetting services could look for misuse of dynamic libraries.

Log Sources
Data Component Name Channel
API Calls (DC0112) Application Vetting None