FEATURE REQUSET: Ability to query by process name

If R7 Insight agents can enumerate open ports and their associated process names, which shows on the Security console asset summary page; why is this not an available field in Query Builder to filter on ‘Process Name’ ?
This would be valuable to have and increase the value in using Goals & SLA’s for tracking the like as well.

Might not be the right answer for you but you can search for this information with Sysmon data. Here is a LEQL query:
where(“event_id” = “3” AND “event.EventData.Data.DestinationIp” IN [“0.0.0.0”,“127.0.0.1”])