Microsoft Sysmon adds support for detecting Process Herpaderping attacks

Sysmon 13.00, released today, can detect both Process Hollowing and Process Herpaderping attacks, giving system administrators an edge in detecting and debugging malware attacks.