This week I talk about the Windows Background Activity Monitor, an artifact that may be used to find evidence of execution.