Rule fired on a VDI host after the May update. Parent process is the updater. What did others see?
Some of what you see here is sample content. While the community forms, part of the members, reviews, ratings and discussions are seeded examples. Every one is badged Sample, and they do count towards the totals on this site. Vendor pages, the security data and the tools are real.
Smoke test: is this alert real?
Is this alert real?
6 Sep 2026
4 views
2 replies
We have seen this rule fire on VDI images after the May update; it is the updater service and is benign. Vendor employee, disclosed.
We have seen this rule fire on VDI images after the May update; it is the updater service and is benign. Vendor employee, disclosed.