Behind the Mask: Spoofing Call Stacks Dynamically with Timers | Cobalt Strike Blog

https://www.cobaltstrike.com/blog/behind-the-mask-spoofing-call-stacks-dynamically-with-timers/