Which technique is used to evade detection from security products by executing arbitrary code in the address space of a separate live operation?

Process injection is a tactic where malicious code is inserted into the memory space of another

process, enabling it to run with the privileges and context of a legitimate application. The Cisco study

guide explains that this method allows malware to "hide in plain sight" within trusted processes and

evade endpoint detection and response (EDR) tools.

It specifically notes: "Process injection techniques allow malware to execute within the memory

space of a legitimate process, avoiding detection and taking advantage of the process's

permissions.".