El Jefe 2.0 - Process Chain Visualization and Heuristics
|Walking through the events on multiple stations|
- Why is IExplorer.exe popping up commands like crazy?
- Why does Adobe PDF process spawn another process as LOCAL/SYSTEM?
- Why did this user suddenly start using commands like wmic, which only a system administrator normally would use?
|Process Usage: An easy way to identify process used only a small amount of time|
|Analyzing triggered events over time|
Keep tuned, because this new release is around the corner!