Windows API Calls Threat Hunting using Sysmon