Title
#general
b

Brandon Mesa

07/06/2022, 5:56 PM
Does anyone know where, or rather, could someone point me to a list of the event types supported by the es_process_events tables?
zwass

zwass

07/06/2022, 6:00 PM
@sharvil is most likely to know
s

sharvil

07/06/2022, 6:03 PM
hey @Brandon Mesa
es_process_events
table notifies on exec, fork and exit events
ES_EVENT_TYPE_NOTIFY_EXEC, ES_EVENT_TYPE_NOTIFY_FORK, ES_EVENT_TYPE_NOTIFY_EXIT
^ in EndpointSecurity parlance
b

Brandon Mesa

07/06/2022, 6:04 PM
Much appreciated, thanks @sharvil!