PPID Spoofing & BlockDLLs with NtCreateUserProcess - Offensive Defence

https://offensivedefence.co.uk/posts/ntcreateuserprocess/

https://x.com/home/status/1525249747082149889