definition: (Processes.process_name=psexec.exe OR Processes.process_name=psexec64.exe OR Processes.original_file_name=psexec.c) description: Matches the process with its original file name, data for this macro came from https://strontic.github.io/ name: process_psexec