You can place more invasive checks to figure out which process is responsible if you know you are being attacked. Or you can switch your system to a more high a

You can place more invasive checks to figure out which process is responsible if you know you are being attacked. Or you can switch your system to a more high assurance mode from a performance mode (eg: refresh memory more often).