Add additional process fields to allowlist.

elastic · Dec 9, 2020 · b707729 · b707729
1 parent 4c17199
commit b707729
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/x-pack/plugins/security_solution/server/lib/telemetry/sender.ts b/x-pack/plugins/security_solution/server/lib/telemetry/sender.ts
@@ -329,6 +329,8 @@ const allowlistEventFields: AllowlistFields = {
     executable: true,
     command_line: true,
     hash: true,
+    pid: true,
+    uptime: true,
     Ext: {
       code_signature: true,
     },
@@ -340,6 +342,12 @@ const allowlistEventFields: AllowlistFields = {
       Ext: {
         code_signature: true,
       },
+      uptime: true,
+      pid: true,
+      ppid: true,
+    },
+    token: {
+      integrity_level_name: true,
     },
   },
 };