-- Dump a list of process execution events from EndpointSecurity -- -- platform: darwin SELECT * FROM es_process_events;