[BUG] - Unknown Process Using The Kerberos Protocol is too noisy about security_content HOT 3 CLOSED

| tstats `security_content_summariesonly` count FROM datamodel=Endpoint.Processes where Processes.process_name!=lsass.exe by _time Processes.process_id Processes.process_name Processes.dest Processes.process_path Processes.process Processes.parent_process_name 
| `drop_dm_object_name(Processes)` 
| `security_content_ctime(firstTime)` 
| `security_content_ctime(lastTime)` 
| join process_id dest 
    [| tstats `security_content_summariesonly` count FROM datamodel=Network_Traffic.All_Traffic where All_Traffic.dest_port = 88 by All_Traffic.src All_Traffic.process_id All_Traffic.dest_port 
    | `drop_dm_object_name(All_Traffic)` 
    | rename src as dest ] 
| table _time dest parent_process_name process_name process_path process process_id dest_port 
| `unknown_process_using_the_kerberos_protocol_filter````


Note: to better avoid collisions, process_guid field is better however the Network DM currently has limitation from using that.