sysmon 2 Detecting known DLL hijacking and named pipe token impersonation attacks with Sysmon Nov 13, 2020 A Defender’s Guide For Rootkit Detection: Episode 1 – Kernel Drivers Apr 20, 2020