Skill v1.0.1

version: "1.0.1" name: memory-rop-chain-detect description: > Detect Return-Oriented Programming (ROP) chains in exploited processes by identifying unusual gadget sequences, stack pivots, and ret instruction abuse in call stacks. domain: cybersecurity subdomain: process-forensics tags:

• rop
• return-oriented-programming
• gadget
• stack-pivot
• exploit-detection

nist_csf:

• DE.CM-04

mitre:

• T1203
• T1068

cwe:

• CWE-121

capec: []

Overview

Detect Return-Oriented Programming (ROP) chains in exploited processes by identifying unusual gadget sequences, stack pivots, and ret instruction abuse in call stacks. domain: cybersecurity subdomain: process-forensics tags:

• rop
• return-oriented-programming
• gadget
• stack-pivot
• exploit-detection

nist_csf:

• DE.CM-04

mitre:

• T1203
• T1068

cwe:

• CWE-121

capec: []

Key Points

• [Content to be added]

Reference

See SKILL taxonomy for more details.