When a process inserts itself into the memory of another process. Can bypass verification checks for signed software.

Recognizing Process Replacement

  1. Process String Comparrison