Networking / Beginners

Unknown Processes

Lots of processes run on Windows 2000 systems. Some of them are easy to figure out and some are not. If you look at the Task Manager, you can see the processes that are running and how much CPU and memory they are using.

System administrators should periodically examine the Task Manager to see if any unknown processes are running. A good example of something to look for is CMD processes. The CMD process is the command prompt or DOS Window. If it is running, you should be able to see a window on the screen. In some cases, an intruder will cause a CMDprocess to start in order to perform other operations on the system. This is a clear indication that something unusual is happening on the system.

[Previous] [Contents]

In this tutorial:

  1. Windows 2000 Security Issues
  2. Setting up the System
  3. Local Security Policy Settings
  4. Logon Message
  5. LAN Manager Authentication Level
  6. System Configuration
  7. File Systems
  8. Network
  9. Account Settings
  10. USER MANAGEMENT
  11. Setting File Permissions
  12. System Management
  13. Analysis
  14. Configuration
  15. Validation
  16. Export
  17. Auditing a System
  18. Log Files
  19. Looking for Suspicious Signs
  20. Missing Log Files or Gaps in the Log Files
  21. Unknown Processes