# 系统类

- [ImportDLLInjection 通过修改内存中的PE头来注入DLL的另一种方法](/redteam-hong-dui/xi-tong-lei/importdllinjection-tong-guo-xiu-gai-nei-cun-zhong-de-pe-tou-lai-zhu-ru-dll-de-ling-yi-zhong-fang-fa.md)
- [动态调用进程注入逻辑](/redteam-hong-dui/xi-tong-lei/dong-tai-diao-yong-jin-cheng-zhu-ru-luo-ji.md)
- [父进程破坏](/redteam-hong-dui/xi-tong-lei/fu-jin-cheng-po-huai.md)
- [进程挖空(MitreT1055.012)](/redteam-hong-dui/xi-tong-lei/jin-cheng-wa-kong-mitret1055.012.md)
- [使用WindowsDefender下载文件](/redteam-hong-dui/xi-tong-lei/shi-yong-windowsdefender-xia-zai-wen-jian.md)
- [通过挂起EventLog服务线程禁用Windows事件日志](/redteam-hong-dui/xi-tong-lei/tong-guo-gua-qi-eventlog-fu-wu-xian-cheng-jin-yong-windows-shi-jian-ri-zhi.md)
- [隐藏windows服务](/redteam-hong-dui/xi-tong-lei/yin-cang-windows-fu-wu.md)
- [远程解压文件](/redteam-hong-dui/xi-tong-lei/yuan-cheng-jie-ya-wen-jian.md)
