definition: (Processes.process_name=procdump.exe OR Processes.process_name=procdump64.exe OR Processes.original_file_name=procdump) description: Matches the process with its original file name, data for this macro came from https://strontic.github.io/ name: process_procdump