Monitoring Process Creation via the Kernel (Part III) - Synack