SEP Should Capture Process Owner

I am running the SEP 14 client on a terminal server and I cannot trust the Username field because it has proven to be inaccurate in my environment.  Instead of capturing some random user that is logged in, capture the owner of a process and store that in the Username.  This would be far more accurate and help me track down the source of the problems instead of guessing.  Also, capturing the PID and storing that somewhere would be helpful too.