Which tool provides an option that can tell you if a process is using a file that is known to be malicious?