Detect a Web-Exploit Chain

Red: drop a webshell through a file-upload exploit. Blue: detect the exploitation attempt and the tell-tale child process the web service spawns when the shell runs.