.@matthewdunwoody is on a roll: he just added sysmon support to process-forest https://github.com/williballenthin/process-forest