Observation Working Identify a target process and thread. Suspend the target thread. Get that thread’s context (registers etc.) Allocate memory in the target process using “. Write payload into the allocated