• None – Sets no data suppression.
• Medium – Some data is suppressed. Process documents that contain only modload events are not recorded.
• High – More data is suppressed. Process documents with only modloads and/or crossproc events are not recorded.
- Data suppression may result in false positives in the results of cmdline searches as the childproc command line is appended to the parent process