Information about the process and any required context values for a specific finding.
Additional information about the suspicious activity.
Information about the observed process.