feat(rules): detect ReadDirectoryChanges shellcode via callback and APC (#1095)#1143

sherkhanz wants to merge 1 commit intomandiant:mastermandiant/capa-rules:masterfrom

sherkhanz:feat-issue-1095-readdirectorychanges-callbacksherkhanz/capa-rules:feat-issue-1095-readdirectorychanges-callbackCopy head branch name to clipboard