The fact
The technique exploits process parameters without using monitored Windows APIs.
It makes attacks harder to detect for security solutions.
Click the link to read an article on the topic:
The technique exploits process parameters without using monitored Windows APIs.
It makes attacks harder to detect for security solutions.