saferwall/saferwall

[Services] Create process tree structure in sandbox

Closed this issue · 2 comments

LordNoteworthy commented 
{
	"proc_tree": {
		"pid": 102
		"proc_name": "malware.exe"
		"file_path": "C:\\Users\\Ayoub\\Downloads\\malware.exe"
		"file_type": "PE"
		"detection": "Emotet"
		"ioc": [
			{
				"category":
				"description":
				"severity":
				"module":
			}
		],
		"child": {}
	},
}