SUNSPOT monitored running processes for instances of "MsBuild.exe" by hashing the name of each running process and comparing it to the corresponding value "0x53D525". It also extracted command-line arguments and individual arguments from the running "MsBuild.exe" process to identify the directory path of the Orion software Visual Studio solution.