Reputation of Windows Executables: Never seen process(es)

info Nessus Plugin ID 70943

Synopsis

Several processes running on the remote host have never been seen in recent scans.

Description

One or more running processes on the remote Windows host are not listed in any database of 'known good' software, and have never been seen in any recent (less than twelve months) scans.

Solution

Make sure that these processes are used in accordance to your organization's acceptable use and security policies.

Plugin Details

Severity: Info

ID: 70943

File Name: never_seen_process_before.nbin

Version: 1.212

Type: local

Agent: windows

Family: Windows

Published: 11/19/2013

Updated: 4/15/2024

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

Required KB Items: malscan/enabled