Brandon Mesa
07/06/2022, 5:56 PMzwass
sharvil
07/06/2022, 6:03 PMes_process_events
table notifies on exec, fork and exit events
ES_EVENT_TYPE_NOTIFY_EXEC, ES_EVENT_TYPE_NOTIFY_FORK, ES_EVENT_TYPE_NOTIFY_EXIT
^ in EndpointSecurity parlanceBrandon Mesa
07/06/2022, 6:04 PM