https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Analytics-Alert-Reference-by-Alert-name/Wsmprovhost.exe-Rare-Child-Process
Wsmprovhost.exe Rare Child Process
Synopsis Activation Period 14 Days Training Period 30 Days Test Period N/A (single event) Deduplication Period 1 Day Required Data Requires: XDR Agent...
exerarechildprocess