Access official resources from Carbon Black experts
Examples can be "powershell.exe" or "msiexec.exe". In contrast, other pages will show the "process name" as the script or file name that's being called such as "my_script.ps1" or "my_install.msi" respectively.
https://docs-staging.vmware.com/en/draft/VMware-Carbon-Black-Cloud/services/carbon-black-cloud-user-...
VMware Carbon Black Cloud User Guide
Carbon Black Cloud: Why Do Some Powershell Events Show the .ps1 Script as the Process Name?
Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.