GitHub repository: murchisd/splunk_pstree_app
Primary language: Python
Created: 2019-02-16T04:22:49Z
Description: Custom Splunk search command to reconstruct a pstree from Sysmon process creation events (EventCode 1)