MAVInject.exe /INJECTRUNNING Process Injection Abuse (Mustang Panda / Flax Typhoon)
Detects the execution of MAVInject.exe (Microsoft Application Virtualization Injector) with the /INJECTRUNNING parameter, a technique used to inject malicious code into a running process to evade detection.
SentinelOne
