[ Crowdstrike Falcon ] Parse of process field is wrong.

[leandrojmp]

Hello,

The parse of the process fields in the Crowdstrike Falcon Pipeline is wrong, it is creating fields with dots in the name instead of nested json objects.

It creates this:

{
    "process.executable": "value"
}

Instead of

{
    "process": {
        "executable": "value"
    }
}

This same issue was present in the filebeat integration and I submitted a fix more than an year ago.

I will submit a PR later with the same fix, but I'm creating this issue to register the problem.

[elasticmachine]

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)