Process Ghosting is a technique that uses a temporary file with pending deletion to create a process from that content.
To execute the file, pass the EXE file that will be executed:
cargo run -- <file.exe>target/release/process_ghosting.exe <file.exe> <args>Real use:
target/release/process_ghosting.exe mimikatz.exe "coffee localtime exit"