Techniques for detecting malicious activity

摘要

Techniques for detecting malicious activity are disclosed. In one particular embodiment, the techniques may be realized as a method for detecting malicious activity including receiving information indicating a first process being executed, the first process including a plurality of first process components, receiving information specific to at least one of the plurality of first process components, determining whether the first process exhibits malicious behavior; and identifying which of the plurality of first process components is responsible for the malicious behavior based on the received information.

主权项

1. A method for detecting malicious activity comprising:
receiving information indicating a first process being executed, the first process including a plurality of first process components; receiving information specific to at least one of the plurality of first process components; determining whether the first process exhibits malicious behavior; determining whether a second process separate from the first process exhibits malicious behavior, the second process including second process components; determining whether one of the second process components is the same as one of the first process components when the first and second processes exhibit malicious behavior; and in the event it is determined that one of the second process components is the same as one of the first process components when the first and second processes exhibit malicious behavior, implementing a predetermined action.