You can jump to a Process Timeline from many views, like a Hash Search, by clicking which of the following?
According to theCrowdStrike Falcon Devices Add-on for Splunk Installation and Configuration Guide v3.1.5+, the Process Timeline tool allows you to view all cloudable events associated with a given process, such as process creation, network connections, file writes, registry modifications, etc1.The tool requires two parameters:aid(agent ID) andTargetProcessId_decimal(the decimal value of the process ID)1.You can jump to a Process Timeline from many views, such as Hash Search, Host Timeline, Event Search, etc., by clicking on either the Process ID or Parent Process ID fields in those views1.This will automatically populate the aid and TargetProcessId_decimal parameters for the Process Timeline tool1.
Limited Time Offer
25%
Off
Dulce
16 days agoAdrianna
20 days agoLemuel
20 hours agoAlishia
25 days agoLourdes
29 days agoCasie
1 months agoJamal
1 months agoZana
6 days agoFallon
1 months agoAlishia
1 months agoLourdes
2 months ago