A filter file I created to detect process injections in malware using a free API Monitor tool from rohitlab. Battle-tested and documented in PentestMag https://pentestmag.com/product/pentest-fuzzing-techniques/