Software Secure Workload
Activity Configure

Privilege Escalation

Privilege Escalation search terms have the prefix “Privilege Escalation - “, for example, “Privilege Escalation - Parent Com- mand Line”

Field

Description

Parent Command Line

Full command line of the parent of the process

Parent Exec Path

Full path of the parent of the process

Parent Uptime (microseconds)

Time since the parent of the process was executed

Parent Username

User that executed the parent of the process

Type - Suid Binary

Indicates whether the binary has the suid bit set