Break Process Trees (T1036.009)

An adversary may attempt to evade process tree-based analysis by modifying executed malware’s parent process ID (PPID).

Tactics
TA0005

Sub-technique of
T1036

---

See: MITRE ATT&CK