Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections - View it on GitHub