Cross process injection/process migration - interesting read

[secursig]

I thought all you reverse engineers out there might enjoy this since it talks about the calls use in late malware

 

https://blogs.technet.microsoft.com/mmpc/2017/03/08/uncovering-cross-process-injection-with-windows-defender-atp/