Detects the use of SysmonEnte, a tool to attack the integrity of Sysmon
Read the full analysis on IntelFusions