Hi All, Is there anyway to know process name from ...
# general
n
Hi All, Is there anyway to know process name from process id in osquery?
p
Yes. If your are using processes table, you can do "SELECT p.name from processes as p where p.pid = [PROCESS_ID]". In case, you are using process_events table, you can use path column and extract the process name from it.