Whoami Utility Execution

Detects the execution of whoami, which is often used by attackers after exploitation / privilege escalation