{% if results.behavior and results.behavior.anomaly %}

Anomalies

{% endif %} {% if processed %}

Behavior Summary

{% for orig, cat, subcat in mapping if processed[cat][subcat] %}
{{cat}}-{{subcat}} {% if processed[cat][subcat] %} {% else %} Nothing to display. {% endif %}
{% endfor %} {% endif %}

Processes

registry filesystem process services network synchronization

{% if results.behavior and results.behavior.processes %} {% for process in results.behavior.processes %}

{{process.process_name}} PID: {{process.pid}}, Parent PID: {{process.ppid}}

{% endfor %} {% elif results.behavior2 and results.behavior2.processes %} {% for process in results.behavior2.processes %}

{{process.process_path}} PID: {{process.pid}}, Parent PID: {{process.ppid}}

{% endfor %} {% else %} Nothing to display. {% endif %}