How to Configure Sysmon to Log the Parent Process Hash in Process Creation Events

I am using Sysmon to monitor process creation in my Windows environment. Currently, process creation events (Event ID 1) log detailed information about the parent process, such as the full path (ParentImage) and command line (ParentCommandLine). However, I would like to configure Sysmon to also log the hash of the executable file of the parent process.

I understand that Sysmon does not directly log the hash of the parent process in process creation events. Is there any configuration or method that allows obtaining this information directly in Sysmon logs? Or would it be necessary to correlate events from other IDs to retrieve the parent process hash?