Memory Analysis - Step 4 - Look for Evidence of Code Injection.