Process Injection via APC Queue

APC injection places a code callback in a target thread's user-mode APC queue so it can execute in the target process context. A conventional queued user APC runs when its thread enters an alertable wait; the Early Bird variant queues to a newly created suspended process's primary thread before resuming it. Remote injection requires compatible target addresses and process/thread access rights. Queue acceptance alone does not prove that the callback executed.