Sysmon v13.00, Process Monitor v3.61 and PsExec v2.21

https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon This update to Sysmon adds a process image tampering event that reports when the mapped image of a process doesn’t match the on-disk...