Tag: .NET hollowing

Time Travel Triage: Using Time Travel Debugging to Analyze .NET Hollowing

TL;DR Time Travel Debugging (TTD) in WinDbg lets analysts record a deterministic execution trace of a user-mode process and replay…