Runtime behavioral analysis tool that maps the process cascade of suspicious packages into a directed tree, catching supply chain attacks th