3. The method of claim 2 , wherein the parsing includes generating tokenized shingles of the application startup data.
3. The method of claim 2 , wherein the parsing includes generating tokenized shingles of the application startup data. 5. The method of claim 3 , further including using predetermined command parameters to create process rules that identify host-specific processes.