@clong 5 minutes. We have a strict requirement for knowing any unauthorized process that starts within 5 min so... pewpewpew