An Administrator is alerted to a Suspicious Process Creation security event from multiple users.

With the Malware Security profile, disable the "Prevent Malicious Child Process Execution" module

Within the Malware Security profile add the specific parent process, child process, and command line argument to the child process whitelist

In the Cortex XDR security event, review the specific parent process, child process, and command line arguments

Contact support and ask for a security exception.