Title | Find process by executable metadata |
---|---|
ID | RA2403 |
Description | Find a process that is being executed at the moment or at a particular time in the past by its executable metadata (i.e. signature, permissions, MAC times) |
Author | your name/nickname/twitter |
Creation Date | YYYY/MM/DD |
Category | Process |
Stage | RS0002: Identification |
References | |
Requirements |
|
Workflow
Description of the workflow for single Response Action in markdown format.
Here newlines will be saved.