Also watching CreateProcessInternalW for file execution

CreateProcessInternalW Api is now added to the apis creating Enhanced behaviour file-execute