While in an Event Search, a responder clicks on an event action. What does the ' Show Child Processes ' event action do?
It displays a list of children in a new graphical tree.
It generates a new Event Search based on the specific Event Action and Parent PID.
It automatically terminates all children of that process on the endpoint.
It pivots to the Host Search for the machine where the process ran.
Submit