Environment
Question
How does data suppression in the sensor group settings affect process queries?
Answer
- Enabling data suppression in the sensor group settings impacts the way that the cmdline string searches.
- With data suppression enabled, the command line string for all child processes are included in the command line string of the process you're searching on.
Additional Notes
- Child processes that qualify for suppression do not have their own process document.
Related Content
