You are reviewing the raw data in an event search from a detection tree. You find a FileOpenInfo event and want to find out if any other files were opened by the responsible process. Which two field values do you need from this event to perform a Process Timeline search?
uday1985
4 weeks, 1 day agokangaru
3 months agosbag0024
3 months, 2 weeks agomlobo
3 months, 2 weeks agoPipo12345
4 months, 3 weeks ago