Generally, a process is generated from an executable file. Therefore, the process model naturally includes attributes containing information about the originating executable file. In this PR, we are adding the following three attributes to further extend the originating executable file details.
process.origin_referrer_url
process.origin_url
process.zone_identifier
The name of these attributes and where to add it were decided after consulting with @joe-desimone and @trisch-me.
The meaning of each field is explained in detail in the PR below.
Changes
This PR adds the following attributes.
process.origin_referrer_urlprocess.origin_urlprocess.zone_identifierDetails
Generally, a process is generated from an executable file. Therefore, the process model naturally includes attributes containing information about the originating executable file. In this PR, we are adding the following three attributes to further extend the originating executable file details.
process.origin_referrer_urlprocess.origin_urlprocess.zone_identifierThe name of these attributes and where to add it were decided after consulting with @joe-desimone and @trisch-me.
The meaning of each field is explained in detail in the PR below.
Merge requirement checklist
[chore]