Weekend project idea up for grabs: update process-forest to support sysmon events. https://github.com/williballenthin/process-forest