f427735610
* Update initial_access_execution_susp_react_serv_child.toml * Update initial_access_execution_susp_react_serv_child.toml * Enhance EQL query for process execution detection * Update initial_access_execution_susp_react_serv_child.toml * Update initial_access_execution_susp_react_serv_child.toml * Update rules/cross-platform/initial_access_execution_susp_react_serv_child.toml Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com> --------- Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>