Windows Core Processes | Threat Hunting & Cybersecurity | Process Explorer

Hey everyone! Today's video is on common Windows processes. Have you ever opened up your task manager and wondered if a .exe or other process was actually malware running on your system? Well, the best place to start is by learning some of the basic Windows processes and what the normal baseline should look like. We'll be talking about Process Explorer (an advanced system utility) and some of the ways to spot the ways threat actors might hide their malware in plain sight! As a SOC analyst, you'll be alerted to events involving these processes, and you can use your skills to determine whether they're benign or an indicator of an attack.

00:00 Intro
00:26 What is a Windows Process?
01:04 Common Indicators
02:45 System
10:06 Outro

Links:

Video Assets:

[khayla_matthews]

Great video! Thanks for posting. This was actually a really good starting point to do more research.