IP addresses and malicious domains are huge wins during incident response, using Process Hacker to gather this information means that compromised hosts can be identified and proactive blocks can be put in place to contain a malware infection.

By seeing what processes are created and being able to identify network connections and interesting strings from memory means that valuable indicators of compromise (IOC’s) can be gathered when triaging a malware infection. These types of features make Process Hacker an ideal tool for monitoring malware on a device. Process Hacker is an open-source tool that will allow you to see what processes are running on a device, identify programs that are eating up CPU resources and identify network connections that are associated with a process. It is a popular malware analysis tool amongst security professionals as it can extract a wealth of information from processes that are running on a device. Process Hacker is a great tool for monitoring and investigating processes created by a piece of malware.

Process monitor malware analysis