Viewing a tree of events

March 20, 2024

ID 228641

The tree of events is a graph that presents information about events that are connected with this event.

To open the tree of events:

  1. Open the event details.
  2. Click the Tree of events button.

A new page opens. The page has the tree of events itself in the form of a process graph and a window with the event details on the right part of the page. In the event details, detailed information about the event or node in question is displayed.

A tree of events contains the following information:

  • The initial event for which you are viewing information
  • Parent process

    The parent process is displayed to the left of the event you are viewing. It is labeled by the name of the executable(without the path). Clicking the parent process displays the process that has initiated the process in question and is a parent process with regard to that process. If there is no further parent process, the name of the device where the process was registered is displayed instead.

  • Target process

    If a process has a target process, the target process is displayed to the right of the event you are viewing. A target process is labeled by the name of executable (without the path). If the initial process indicates start of a process, the target process is displayed instead of the initial process.

Clicking an event on the event tree opens a window with details about the event.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.