PHP OOM errors followed by worker segfaults (OPcache type confusion, PHP2Shell)
Detects a sequence of PHP memory allocation failures followed by worker crashes (segmentation faults/signal 11) on the same host within a 15-minute window, potentially indicating OPcache shared-memory corruption or application instability.
Microsoft Sentinel (KQL)
