Detects execution of PktMon, a tool that captures network packets.
Read the full analysis on IntelFusions