Hello there,
I was working through Lab 8 of the THP course and came across the section for injecting processes and using Memhunter to pick up on these injections. The normal(option 1) worked fine, the reflective payload worked fine too, but I am having issues with the process hollowing question. Which payload do we use on the notepad.exe file?
Thank you for your help!
