[sarciszewski]

So, correct me if I'm wrong: A non-technical user on their network DIDN'T have EMET running? Or did they, perhaps, have an EMET bypass in their shellcode?

If it's the latter, that's what I would be more interested in.

[rjaco31]

What makes you think that EMET can't be bypassed?