Potential Shellcode Injection — Detection Rule

Detects potential shellcode injection as seen used by tools such as Metasploit's migrate and Empire's psinject.

Read the full analysis on IntelFusions