cuckoobox/cuckoo — pull request #172 by Thorsten-Sick (2013-10-28 13:59:04+00:00)
Title: Also watching CreateProcessInternalW for file execution

CreateProcessInternalW Api is now added to the apis creating Enhanced behaviour file-execute