Port 22

Using process creation properties to catch evasion techniques