Set recommended level for process.args_count

mjwolf · Jul 22, 2024 · 02eed18 · 02eed18
1 parent 927619e
commit 02eed18
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/model/registry/process.yaml b/model/registry/process.yaml
@@ -94,6 +94,8 @@ groups:
           This field can be useful for querying or performing bucket analysis on how many
           arguments were provided to start a process. More arguments may be an indication
           of suspicious activity.
+        requirement_level:
+          recommended: if `process.command_args` is populated.
         examples: [4]
       - id: owner
         type: string