I am getting a strange series of events on any of my citrix servers and can not figure out why at all this particular os process rule is in cluding these processes. Using the default httpd process monitor. Any of my citrix servers have the httpd process monitor show results for either xte.exe for the standard citrix servers or CtxSGSvc.exe for ones running the secure gateway. I don't have the slightest clue why a rule with a regex searching for httpd would be including these processes in it's list. Has anybody come across a reason why these processes are shown as an httpd process?