And, above is the osquery process_events, (I adjust the column sequence for easy reading). We can see that: a process (pid 8616) use wget (pid 8618) to download a .sh file, and I check the .sh file will download the .x86_64 file and execute it (and this file is the Miner Trojan). so pid 8616 must be the Miner Loader Trojan, but I can't find the event of this process in the table(process_events). So how can I make some configuration change for osquery to get more detail info of process_events?