| ID | C0017 |
| Objective(s) | Process |
| Related ATT&CK Technique | None |
Malware creates a process.
| Name | ID | Description |
|---|---|---|
| Create Process via Shellcode | C0017.001 | Malware uses shellcode to create a process. |
| Create Process via WMI | C0017.002 | Malware uses WMI to create a process. |
| Create Suspended Process | C0017.003 | Malware created a suspended process. |