When examining a raw DNS request event, you see a field called ContextProcessld_decimal. What is the purpose of that field?
It contains the TargetProcessld_decimal value for other related events
It contains an internal value not useful for an investigation
It contains the ContextProcessld_decimal value for the parent process that made the DNS request
It contains the TargetProcessld_decimal value for the process that made the DNS request
Submit