https://docs.rapid7.com/insightidr/windows-suspicious-process
https://docs.rapid7.com/insightidr/windows-suspicious-process