SYNOTI / Process Tree
Process Tree
Server process hierarchy and suspicious detection.
Processes
1,204
on www-01
Suspicious
3
flagged
Root
1
PID 1
Children
218
forked
Process Activity
Process Hierarchy
| PID | Process | User | CPU | Flag |
|---|---|---|---|---|
| 1 | systemd | root | 0.0% | Clean |
| 1024 | nginx | www-data | 2.1% | Clean |
| 4211 | php-fpm | www-data | 8.4% | Clean |
| 8893 | cron.sh | root | 0.1% | Suspicious |
Recent Activity
View allRansomware behavior blocked on mail-01 CRITICAL
Playbook PB-041 auto-contained host · Ryuk TTPs matched
SSH brute force from 203.0.113.42 HIGH
42 failed logins in 60s · source IP blocked
Threat hunt matched T1059.001 on www-02
PowerShell obfuscation · confidence 0.91
SCA scan completed on 128 hosts
98.2% compliance · 11 benchmarks passed
Firewall rule 'BLK-3321' propagated to 14 nodes
0.4s propagation · geo-blocked 12 CIDRs
Sandbox verdict — 'invoice_9921.exe' malicious
Heuristic score 96 · family 'Emotet'