{"id":30777,"date":"2026-07-30T10:00:00","date_gmt":"2026-07-30T08:00:00","guid":{"rendered":"https:\/\/t-defence.it\/?p=30777"},"modified":"2026-07-30T09:28:12","modified_gmt":"2026-07-30T07:28:12","slug":"proc-memory-injection-contribution-to-atomic-red-team","status":"publish","type":"post","link":"https:\/\/t-defence.it\/en\/proc-memory-injection-contribution-to-atomic-red-team\/","title":{"rendered":"Proc Memory Injection: Contribution to Atomic Red Team"},"content":{"rendered":"

Atomic\u00a0Red Team<\/span><\/b>\u00a0\u00e8 la libreria open source di riferimento per verificare, con test concreti, l’efficacia dei controlli di sicurezza di un’organizzazione. Finora per\u00f2\u00a0mancava un test per coprire l’iniezione di codice in un processo in esecuzione attraverso un’interfaccia di memoria di sistema di Linux, nota nel framework\u00a0<\/span>MITRE ATT&CK<\/span><\/b>\u00a0come Process Injection: Proc Memory (T1055.009).<\/span><\/p>\n

Il nuovo studio dei Cyber Studios, realizzato dal nostro Malware Lab, ha colmato questo vuoto aggiungendo sei nuovi test\u00a0atomici, ora parte del ramo principale del progetto.<\/span><\/p>\n

Questa\u00a0tecnica\u00a0di attacco\u00a0sfrutta un’interfaccia di sistema che, su Linux, espone lo spazio di memoria di un processo come area scrivibile. Se l’accesso non \u00e8 opportunamente ristretto, un attaccante pu\u00f2 individuare una regione di memoria del processo bersaglio e sovrascriverla per dirottarne il flusso di esecuzione, ottenendo codice eseguito nel contesto di un processo legittimo.<\/span>\u00a0<\/span><\/p>\n

Il contributo \u00e8 stato accettato e integrato nella libreria ufficiale:\u00a0chi utilizza\u00a0Atomic\u00a0Red Team per validare le proprie difese\u00a0ora dispone\u00a0di un mezzo concreto per verificarne la copertura, con il vantaggio della manutenzione continua garantita dal progetto.<\/span>\u00a0<\/span><\/p>\n

If you wish to learn more, here is the link to our comprehensive study<\/strong><\/a>.<\/span>\u00a0<\/span><\/p>\n

In addition, you can subscribe to the specific mailing list\u00a0<\/span>Cyber Studios by T-Defence<\/span><\/b>, to receive updates on upcoming research:<\/span><\/p>\n

https:\/\/t-defence.it\/mailing-list-cyber-studios\/<\/span><\/a>\u00a0<\/span><\/p>","protected":false},"excerpt":{"rendered":"

Atomic\u00a0Red Team\u00a0\u00e8 la libreria open source di riferimento per verificare, con test concreti, l’efficacia dei controlli di sicurezza di un’organizzazione. Finora per\u00f2\u00a0mancava un test per coprire l’iniezione di codice in un processo in esecuzione attraverso un’interfaccia di memoria di sistema di Linux, nota nel framework\u00a0MITRE ATT&CK\u00a0come Process Injection: Proc Memory (T1055.009). Il nuovo studio dei […]<\/p>\n","protected":false},"author":7,"featured_media":30778,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[102],"tags":[],"class_list":["post-30777","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tinextadefencebusiness"],"acf":[],"yoast_head":"\nProc Memory Injection: Contribution to Atomic Red Team - T-Defence<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/t-defence.it\/en\/proc-memory-injection-contribution-to-atomic-red-team\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Proc Memory Injection: Contribution to Atomic Red Team - T-Defence\" \/>\n<meta property=\"og:description\" content=\"Atomic\u00a0Red Team\u00a0\u00e8 la libreria open source di riferimento per verificare, con test concreti, l’efficacia dei controlli di sicurezza di un’organizzazione. Finora per\u00f2\u00a0mancava un test per coprire l’iniezione di codice in un processo in esecuzione attraverso un’interfaccia di memoria di sistema di Linux, nota nel framework\u00a0MITRE ATT&CK\u00a0come Process Injection: Proc Memory (T1055.009). Il nuovo studio dei […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/t-defence.it\/en\/proc-memory-injection-contribution-to-atomic-red-team\/\" \/>\n<meta property=\"og:site_name\" content=\"T-Defence\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-30T08:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/t-defence.it\/wp-content\/uploads\/2026\/07\/Business_evidenza-2.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1800\" \/>\n\t<meta property=\"og:image:height\" content=\"960\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Federica Casadei\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Federica Casadei\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/\"},\"author\":{\"name\":\"Federica Casadei\",\"@id\":\"https:\\\/\\\/tinextadefence.it\\\/#\\\/schema\\\/person\\\/0dc89f3eeaa8cd7b7c354b61c84d164d\"},\"headline\":\"Proc Memory Injection: Contribution to Atomic Red Team\",\"datePublished\":\"2026-07-30T08:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/\"},\"wordCount\":222,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/tinextadefence.it\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/t-defence.it\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Business_evidenza-2.jpg\",\"articleSection\":[\"#TDefenceBusiness\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/\",\"url\":\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/\",\"name\":\"Proc Memory Injection: Contribution to Atomic Red Team - T-Defence\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/tinextadefence.it\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/t-defence.it\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Business_evidenza-2.jpg\",\"datePublished\":\"2026-07-30T08:00:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/#primaryimage\",\"url\":\"https:\\\/\\\/t-defence.it\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Business_evidenza-2.jpg\",\"contentUrl\":\"https:\\\/\\\/t-defence.it\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Business_evidenza-2.jpg\",\"width\":1800,\"height\":960},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/t-defence.it\\\/proc-memory-injection-contribution-to-atomic-red-team\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/tinextadefence.it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Proc Memory Injection: Contribution to Atomic Red Team\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/tinextadefence.it\\\/#website\",\"url\":\"https:\\\/\\\/tinextadefence.it\\\/\",\"name\":\"Tinexta Defence\",\"description\":\"think next, protect now\",\"publisher\":{\"@id\":\"https:\\\/\\\/tinextadefence.it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/tinextadefence.it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/tinextadefence.it\\\/#organization\",\"name\":\"Tinexta Defence\",\"url\":\"https:\\\/\\\/tinextadefence.it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/tinextadefence.it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/t-defence.it\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/Tinexta_Defence_marchio.png\",\"contentUrl\":\"https:\\\/\\\/t-defence.it\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/Tinexta_Defence_marchio.png\",\"width\":2000,\"height\":990,\"caption\":\"Tinexta Defence\"},\"image\":{\"@id\":\"https:\\\/\\\/tinextadefence.it\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/tinextadefence.it\\\/#\\\/schema\\\/person\\\/0dc89f3eeaa8cd7b7c354b61c84d164d\",\"name\":\"Federica Casadei\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6b35becb35fb83a681c7b431c36de302b4101b5ef0c48984910308c04617428f?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6b35becb35fb83a681c7b431c36de302b4101b5ef0c48984910308c04617428f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6b35becb35fb83a681c7b431c36de302b4101b5ef0c48984910308c04617428f?s=96&d=mm&r=g\",\"caption\":\"Federica Casadei\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Proc Memory Injection: Contribution to Atomic Red Team - T-Defence","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/t-defence.it\/en\/proc-memory-injection-contribution-to-atomic-red-team\/","og_locale":"en_GB","og_type":"article","og_title":"Proc Memory Injection: Contribution to Atomic Red Team - T-Defence","og_description":"Atomic\u00a0Red Team\u00a0\u00e8 la libreria open source di riferimento per verificare, con test concreti, l’efficacia dei controlli di sicurezza di un’organizzazione. Finora per\u00f2\u00a0mancava un test per coprire l’iniezione di codice in un processo in esecuzione attraverso un’interfaccia di memoria di sistema di Linux, nota nel framework\u00a0MITRE ATT&CK\u00a0come Process Injection: Proc Memory (T1055.009). Il nuovo studio dei […]","og_url":"https:\/\/t-defence.it\/en\/proc-memory-injection-contribution-to-atomic-red-team\/","og_site_name":"T-Defence","article_published_time":"2026-07-30T08:00:00+00:00","og_image":[{"width":1800,"height":960,"url":"https:\/\/t-defence.it\/wp-content\/uploads\/2026\/07\/Business_evidenza-2.jpg","type":"image\/jpeg"}],"author":"Federica Casadei","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Federica Casadei","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/#article","isPartOf":{"@id":"https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/"},"author":{"name":"Federica Casadei","@id":"https:\/\/tinextadefence.it\/#\/schema\/person\/0dc89f3eeaa8cd7b7c354b61c84d164d"},"headline":"Proc Memory Injection: Contribution to Atomic Red Team","datePublished":"2026-07-30T08:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/"},"wordCount":222,"commentCount":0,"publisher":{"@id":"https:\/\/tinextadefence.it\/#organization"},"image":{"@id":"https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/#primaryimage"},"thumbnailUrl":"https:\/\/t-defence.it\/wp-content\/uploads\/2026\/07\/Business_evidenza-2.jpg","articleSection":["#TDefenceBusiness"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/","url":"https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/","name":"Proc Memory Injection: Contribution to Atomic Red Team - T-Defence","isPartOf":{"@id":"https:\/\/tinextadefence.it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/#primaryimage"},"image":{"@id":"https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/#primaryimage"},"thumbnailUrl":"https:\/\/t-defence.it\/wp-content\/uploads\/2026\/07\/Business_evidenza-2.jpg","datePublished":"2026-07-30T08:00:00+00:00","breadcrumb":{"@id":"https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/#primaryimage","url":"https:\/\/t-defence.it\/wp-content\/uploads\/2026\/07\/Business_evidenza-2.jpg","contentUrl":"https:\/\/t-defence.it\/wp-content\/uploads\/2026\/07\/Business_evidenza-2.jpg","width":1800,"height":960},{"@type":"BreadcrumbList","@id":"https:\/\/t-defence.it\/proc-memory-injection-contribution-to-atomic-red-team\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/tinextadefence.it\/"},{"@type":"ListItem","position":2,"name":"Proc Memory Injection: Contribution to Atomic Red Team"}]},{"@type":"WebSite","@id":"https:\/\/tinextadefence.it\/#website","url":"https:\/\/tinextadefence.it\/","name":"Tinexta Defence","description":"think next, protect now","publisher":{"@id":"https:\/\/tinextadefence.it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/tinextadefence.it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/tinextadefence.it\/#organization","name":"Tinexta Defence","url":"https:\/\/tinextadefence.it\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/tinextadefence.it\/#\/schema\/logo\/image\/","url":"https:\/\/t-defence.it\/wp-content\/uploads\/2025\/03\/Tinexta_Defence_marchio.png","contentUrl":"https:\/\/t-defence.it\/wp-content\/uploads\/2025\/03\/Tinexta_Defence_marchio.png","width":2000,"height":990,"caption":"Tinexta Defence"},"image":{"@id":"https:\/\/tinextadefence.it\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/tinextadefence.it\/#\/schema\/person\/0dc89f3eeaa8cd7b7c354b61c84d164d","name":"Federica Casadei","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/6b35becb35fb83a681c7b431c36de302b4101b5ef0c48984910308c04617428f?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/6b35becb35fb83a681c7b431c36de302b4101b5ef0c48984910308c04617428f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6b35becb35fb83a681c7b431c36de302b4101b5ef0c48984910308c04617428f?s=96&d=mm&r=g","caption":"Federica Casadei"}}]}},"_links":{"self":[{"href":"https:\/\/t-defence.it\/en\/wp-json\/wp\/v2\/posts\/30777","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/t-defence.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/t-defence.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/t-defence.it\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/t-defence.it\/en\/wp-json\/wp\/v2\/comments?post=30777"}],"version-history":[{"count":2,"href":"https:\/\/t-defence.it\/en\/wp-json\/wp\/v2\/posts\/30777\/revisions"}],"predecessor-version":[{"id":30783,"href":"https:\/\/t-defence.it\/en\/wp-json\/wp\/v2\/posts\/30777\/revisions\/30783"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/t-defence.it\/en\/wp-json\/wp\/v2\/media\/30778"}],"wp:attachment":[{"href":"https:\/\/t-defence.it\/en\/wp-json\/wp\/v2\/media?parent=30777"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/t-defence.it\/en\/wp-json\/wp\/v2\/categories?post=30777"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/t-defence.it\/en\/wp-json\/wp\/v2\/tags?post=30777"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}