This commit is contained in:
Joey Caparas
2018-04-13 14:29:27 -07:00
parent 35529ab8e4
commit 5dc354355b

View File

@ -57,7 +57,7 @@ NetworkCommunicationEvents
The query summarizes by both InitiatingProcessId and InitiatingProcessCreationTime - to make sure the query looks at a single process, and not mixing multiple processes with the same process ID.
### Using command lines queries
### Using command line queries
Command lines may vary - when applicable, filter on file names and do fuzzy matching.