DS0009

DS0009Process

ATT&CK
14.1
References
2

Description

Instances of computer programs that are being executed by at least one thread. Processes have memory space for process executables, loaded modules (DLLs or shared libraries), and allocated memory regions containing everything from user input to application-specific data structures(Citation: Microsoft Processes and Threads)

References

  1. https://attack.mitre.org/datasources/DS0009
  2. https://docs.microsoft.com/en-us/windows/win32/procthread/processes-and-threads

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Data source
Kernel
Data source
Service
Data component
Process Creation
Data component
OS API Execution
Data source
Module
Data source
Named Pipe
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.