Our documentation [0] states that process scanning is disabled by default due to this [1] performance bug in YARA.
The fix has been merged for some time and has been included in v4.2.0-rc1.
If that's so, should we consider enabling process scanning by default and updating the docs?