This event is generated when a process image is changed from an external source, or by using process hollowing or process herpaderping techniques. This event can be used to detect when malware changes legitimate code of a process with malicious code.
As expected, no entries were found in ProcessTempering.
Resources:
Â