Maksym Varnakov
10/31/2022, 4:45 PMSELECT time, pid, path, parent AS ppid, (SELECT path FROM process_events AS pp WHERE pp.pid=p.parent) ppath FROM process_events AS p WHERE syscall='execve';
Does anybody know any workaround or fix to have ppath included? I would really appreciate any help 🙂