Im trying to get the root process for an event on a client currently offline. Using Data Lake query.
However, the Parent PID Search gives no results.The Event is 14 days old. I thought the Sophos PID is THE idicator of something in the Data Lake - how…