Here is a script that I cobbled together for use by a client.

For this particular client they are running ME Pro with SpamAssassin scanning all messages at the MTA level as a "Pickup event" (using SAPlugin.exe). SA scans the message and tags the subject line with "[spam?]".