Just an example of a well-known technique to detect memory tampering via Windows Working Sets. - View it on GitHub