{"version":"2.1.23","anchor":"improved-windows-process-ancestor-detection","canonical_anchor":"improved-windows-process-ancestor-detection","heading":"Improved Windows Process Ancestor Detection","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.23\/e\/improved-windows-process-ancestor-detection","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.23","markdown":"### Improved Windows Process Ancestor Detection\n\n**What**\n\nPowerShell-based process ancestor detection now retrieves the full ancestor chain in a single call.\n\n**Details**\n\n- Uses a more efficient PowerShell script that walks the process tree in one execution\n- Retrieves both process IDs and command lines for ancestors\n- Timeout increased from 1 second to 3 seconds for reliability\n\n**Evidence**\n\nPowerShell script at line 198756 (contains `\"$currentPid =\"`, batched ancestor retrieval logic)"}