Network Process Auditing with Nessus

One of the most important goals of forensic analysis and system auditing is to determine what a system is actually running – not what appears to be running.

A static review of installed system binaries may show results that are perfectly benign while the process that is actually running is not. It is important to correlate the running process with the program stored on disk to really determine what it is doing.