Follow Process
Follow Process search terms have the prefix “Follow Process - “, for example, “Follow Process - Parent Command Line”
|
Field |
Description |
|---|---|
|
Parent Command Line |
Full command line of the parent process |
|
Parent Exec Path |
Binary path of the parent process |
|
Parent Uptime (microseconds) |
Time since the parent process was executed |
|
Parent Username |
Username of the user that executed the parent process |
|
Process Start Time Since Last File Changed (microseconds) |
Time that is elapsed between process start and the most recent (corresponding) file change |
|
Username |
Username that are associated with the process being followed |