<p dir="auto">I noticed after connecting my computer up to a Log Analytics account in Azure that I started getting alerts from Azure Security Center about Windows Terminal launching conhost.  This might be a duplicate of <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="486154976" data-permission-text="Title is private" data-url="https://github.com/microsoft/terminal/issues/2568" data-hovercard-type="issue" data-hovercard-url="/microsoft/terminal/issues/2568/hovercard" href="https://github.com/microsoft/terminal/issues/2568">#2568</a> but might just be related.</p>
<p dir="auto">I am running version 0.6.2951.0 downloaded and installed from the Microsoft Store.</p>
<h2 dir="auto">Alert Details</h2>
<p dir="auto">DESCRIPTION The system process c:\program files\windowsapps\microsoft.windowsterminal_0.6.2951.0_x64__8wekyb3d8bbwe\conhost.exe was observed running in an abnormal context. Malware often use this process name to masquerade its malicious activity.<br>
ACTIVITY TIME Thursday, October 31, 2019, 9:36:12 AM<br>
SEVERITY  Medium<br>
STATE Active<br>
DETECTED BY  Microsoft<br>
ENVIRONMENT Non-Azure<br>
RESOURCE TYPE  Non-Azure Resource<br>
COMMAND LINE conhost.exe --headless --width 120 --height 27 --signal 0x7b8 -- pwsh.exe<br>
PARENT PROCESS windowsterminal.exe<br>
PROCESS ID 0x54b4<br>
PARENT PROCESS ID 0x9dd4<br>
SYSTEM PROCESS CONHOST.EXE</p>
<h1 dir="auto">Environment</h1>
<p dir="auto">windows 1909 build 18363</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="Windows build number: [run `[Environment]::OSVersion` for powershell, or `ver` for cmd]
Windows Terminal version (if applicable):

Any other software?"><pre lang="none" class="notranslate"><code class="notranslate">Windows build number: [run `[Environment]::OSVersion` for powershell, or `ver` for cmd]
Windows Terminal version (if applicable):

Any other software?
</code></pre></div>
<p dir="auto">no</p>
<h1 dir="auto">Steps to reproduce</h1>
<p dir="auto">I've added this to my profiles.json<br>
{<br>
"guid": "{00000000-0000-0000-ba54-000000000002}",<br>
"acrylicOpacity" : 0.75,<br>
"closeOnExit" : true,<br>
"colorScheme" : "Campbell",<br>
"commandline" : ""%PROGRAMFILES%\git\usr\bin\bash.exe" -i -l",<br>
"cursorColor" : "#FFFFFF",<br>
"cursorShape" : "bar",<br>
"fontFace" : "Consolas",<br>
"fontSize" : 10,<br>
"historySize" : 9001,<br>
"icon" : "ms-appx:///ProfileIcons/{0caa0dad-35be-5f56-a8ff-afceeeaa6101}.png",<br>
"name" : "Bash",<br>
"padding" : "0, 0, 0, 0",<br>
"snapOnInput" : true,<br>
"startingDirectory" : "%USERPROFILE%",<br>
"useAcrylic" : true<br>
}<br>
launch git bash with login option</p>
<h1 dir="auto">Expected behavior</h1>
<p dir="auto">Be able to see my normal stuff from my ~/.bash_profile. In my case aliases.</p>
<h1 dir="auto">Actual behavior</h1>
<p dir="auto">I dont see any of my aliases.  It almost feels like the command line args are not being passed to bash.  Or, the starting directory is not being passed.  If there is a work around, i will do that.  i tried creating a .bashrc but this didn't do anything either.</p>