Service host windows process monitor2/17/2023 The problem? In Windows 7 in Task Manager under tab you would see number of “svchost.exe” instances with description of “Host Process for Windows Services”. There can be one service or a group of services under one instance of “svchost.exe”. What is “svchost”? Basically, this is shared process for hosting Windows Services, hence the name SvcHost (Service Host). Got an alert from our EDR regarding execution of the “svchost.exe” via Command Line. What can go wrong with legit Service Host? Checking Service Host for security threats Using SysInternals Process Monitor to understand Service Host
0 Comments
Leave a Reply.AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |