Credential_Access/Hooking

Windows/Credential_Access/Hooking.md

@@ -0,0 +1,12 @@
+## Hooking
+
+MITRE ATT&CK Technique: [T1179](https://attack.mitre.org/wiki/Technique/T1179)
+
+### Sample Windows DLL Injection into PowerShell
+
+     mavinject $pid /INJECTRUNNING C:\Atomic\AtomicSSLHook.dll
+  
+## Test Script
+
+[AtomicSSLHook.dll](https://github.com/redcanaryco/atomic-red-team/blob/master/Windows/Payloads/AtomicSSLHook.dll)
+