{
  "technique_id": "T1620",
  "name": "Reflective Code Loading",
  "tactics": [
    "Stealth"
  ],
  "platforms": [
    "Linux",
    "macOS",
    "Windows"
  ],
  "summary": "Adversaries may reflectively load code into a process in order to conceal the execution of malicious payloads. Reflective loading involves allocating then executing payloads directly within the memory of the process, vice creating a thread or process backed by a file path on disk (e.g., [Shared Modules](https://attack.mitre.org/techniques/T1129))...",
  "generated_by": "SOC Response Atlas by Basyrix"
}