Falcon uses specific identifiers to track processes across the environment.

The standard Process ID (PID) assigned by the Windows operating system.

A sensor-assigned decimal number that is unique for each process across time and hosts.

The memory address where the process’s executable is loaded.

The total number of seconds the process has been running.