Builder

The effective user ID of the user that executed the process.

The absolute path of the process executable file.

The SHA256 hash of the process executable.

Information about the process's lineage.

The name of the process.

The ID of the child process.

The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.

The ID of the process.

The present working directory of the process.

The time when the process started. This is in UTC format.

The user that executed the process.

The unique ID of the user that executed the process.

The unique ID assigned to the process by GuardDuty.