In late June 2023, researchers at MDR and incident response firm Security Joes reported their recent discovery of the Mockingjay process injection technique, which bypasses and evades EDR detection. Essentially, the researchers found that by misusing Windows libraries, one can inject potentially malicious code into various processes without having to execute certain Windows APIs that EDR security solutions normally keep an eye out for and flag as suspicious. In this session, Security Joes researchers will provide important details around their Mockingjay discovery, as well as discuss other common forms of EDR evasion that the end-user community needs to watch out for.