Mavinject Inject DLL Into Running Process — Detection Rule

Detects process injection using the signed Windows tool "Mavinject" via the "INJECTRUNNING" flag

Read the full analysis on IntelFusions