Advanced memory forensics built in the extension: https://blog.eclecticiq.com/detect-and-remediate-process-hollowing-with-eclecticiq-endpoint-response