2. What is the data.win.eventdata.processName value in the alert details?HINT•:\\•••••••\\••••••••\\•••••••.•••

Continuing the discussion from Help Needed: SIEM Detection and Alerting Guided Excercise Task # 3:

However i fill the right processName answer
[redacted]
, it does not recognise

That’s definitely the correct answer. Are you sure you’re typing it in exactly as it appears in the SIEM?

If the issue persists, feel free to send me the answer you’re submitting via private message.