Scribd
Upload
2 views9 pages

monitoring-processes-download-behavior-with-python-slides

The document discusses monitoring LOLbin processes using Python, focusing on abnormal process behavior and traffic tracking. It introduces concepts and techniques applicable to all processes, emphasizing the use of specific process trees and new modules like Collections and Threading. A demonstration is included to illustrate the monitoring of LOLbin process trees and their traffic.

Uploaded by

Alejandro Saldias
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
2 views9 pages

monitoring-processes-download-behavior-with-python-slides

The document discusses monitoring LOLbin processes using Python, focusing on abnormal process behavior and traffic tracking. It introduces concepts and techniques applicable to all processes, emphasizing the use of specific process trees and new modules like Collections and Threading. A demonstration is included to illustrate the monitoring of LOLbin process trees and their traffic.

Uploaded by

Alejandro Saldias
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 9

Monitoring Processes Download

Behavior with Python

Sean Wilkins
Network Engineer & Author

swilkins@infodispersion.com www.infodispersion.com
Module Introduction

Watching for abnormal


Monitoring LOLbin process
process spawning and
behavior
transfers
Overview
- Watching LOLbin processes
- Concepts Demonstration - Monitoring
LOLbins
LOLbin Processes

Module focuses on LOLbin Same techniques can be used for


processes all processes
LOLbin Processes

Utilize the dictionary variable


shown in previous module
Focus will be on specific process trees
LOLbin Processes

Targeted process will have their traffic tracked


Monitoring is limited by Scapy
LOLbin Processes

New modules used include:

Collections Threading

Used to build LOLbin monitor


Demo
How to monitoring LOLbin process trees
Building a process traffic monitoring
Summary
- Watching LOLbin processes
- Concepts Demonstration - Monitoring
LOLbins

You might also like