Практичные инструменты для системных, сетевых, security- и operations-администраторов.

SEC-0304

Elastic Security Unusual Parent-Child Process Detection Generator

Generate a tuned Elastic Security detection for unusual parent-child process with field mapping and false-positive guidance

Updated 25 October 2026