A new approach to hiding data within executable computer program files could make it almost impossible to detect hidden documents.

Microsoft has released Sysmon 15, converting it into a protected process and adding the new 'FileExecutableDetected' option to log when executable files are created.