SpecterOps-Nemesis/sample_files/structured/process_data.json

{
    "data": [
        {
            "name": "System",
            "command_line": null,
            "file_name": null,
            "memory": 98304,
            "process_id": 4,
            "parent_process_id": null,
            "start_time": "2022-06-20T03:15:16.157393Z",
            "arch": "x64",
            "token": {
                "user": {
                    "name": "NT AUTHORITY\\SYSTEM"
                },
                "session": 0
            }
        },
        {
            "name": "explorer.exe",
            "command_line": null,
            "file_name": null,
            "memory": 18304,
            "process_id": 10,
            "parent_process_id": 433,
            "start_time": "2023-01-20T03:15:16.157393Z",
            "arch": "x64",
            "token": {
                "user": {
                    "name": "NT AUTHORITY\\SYSTEM"
                },
                "session": 0
            }
        }
    ],
    "metadata": {
        "agent_id": "339429212",
        "agent_type": "beacon",
        "automated": false,
        "data_type": "process",
        "expiration": "2024-04-03T10:08:40.000Z",
        "source": "DC",
        "project": "ASSESS-X",
        "timestamp": "2023-04-03T10:08:40.000Z"
    }
}