Get the Whitepaper called Hunting Process Injection By Windows API Calls.
You can download it from the following link: https://packetstormsecurity.com/files/download/156147/hunting-process-injection.pdf
Source: https://packetstormsecurity.com/files/156147/Hunting-Process-Injection-By-Windows-API-Calls.html