Monitors ETW for security relevant syscalls maintaining the set called by each unique process - View it on GitHub