I0719 094304.989006 7788 scheduler.cpp:100] Executing scheduled query pack/windows-incorrect_parent_process.conf/1872579785_firefox.exe_incorrect_parent_process: SELECT name as bad_parent_child_name, pid bad_parent_child_pid FROM processes WHERE pid=(SELECT parent FROM processes WHERE parent!=(SELECT pid from processes where name='explorer.exe') AND LOWER(name)='firefox.exe') OR pid=(SELECT pid FROM processes WHERE parent!=(SELECT pid from processes where name='explorer.exe') AND LOWER(name)='firefox.exe'); I0719 094305.642760 7788 killswitch.cpp:60] enum osquery:Killswitch:IsEnabledError 1 (Cannot call registry item: )