+ Added Sysmon detection of Office binaries spawning Windows shells + Additional web servers added for webshell detection