Log the parent process handle for NtCreateProcess[Ex] so we can use it for signature modules, hat tip to a Mr. Dave Aitel ;)