Injected Code — Network Denial of Service (Connection Kill / Adapter Disable / Flood) - ATR-2026-01898 (3bbef9fd-8cf9-512a-979a-96a9aaf59698)
Detects injected code that disrupts connectivity: terminating every process owning a network connection, disabling network adapters via WMI, an unbounded request-flood loop, or a scapy SYN flood against a target.