Process Guard uses multiple attributes to uniquely identify a process. This includes process file path, file hash, parent process file path, command line, user account, and the action taken, detect or block. If any of these attributes change, it will be treated as a new unique event.
Why do I see multiple entries of a process from the same host in the Process Guard home page?
- Published on Sep 11, 2026
- 1 minute(s) read
Was this article helpful?