Sysmon v13.00, Process Monitor v3.61 and PsExec v2.21

Sysmon v13.00 This update to Sysmon adds a process image tampering event that reports when the mapped image of a process doesn’t match the on-disk image file, or the image file is locked for excl...