Hello,
When metricbeat is used on a Windows machine with Trend Micro Apex one and the modules metric
metricbeat.modules:
- module: system
metricsets: ["process"]
period: 60s
after a few seconds metricbeat is stopped and TM pops up with "Malicious behavior detections"