What it detects
Segments with differing content overlapping the same offset.
Why it fires
A classic evasion exploiting reassembly ambiguity to fool IDS/endpoints.
Worst case
Payload hiding · evasion
Matching signatures
Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.