Demonstration of masking command line arguments.

Works by creating a remote process with fake arguments, overwriting them, unsuspending, and then overwriting again with the original fake arguments.

Not fully tested

References

• https://blog.xpnsec.com/how-to-argue-like-cobalt-strike/