How to tell if your PC is hacked: Intro to System Forensics

About this video

• Video Title: How to tell if your PC is hacked: Intro to System Forensics
• Channel: PC Security Channel
• Speakers: Leo
• Duration: 00:08:21

Overview

This video introduces System Forensics using the tool Process Monitor (Procmon) to analyze system activity and detect potential signs of a hacked PC. It explains how to use Procmon to monitor running processes, network connections, and loaded modules, providing insights into system behavior and potential malware.

Key takeaways

• Process Monitor (Procmon): This Microsoft tool allows users to view detailed system activity, including running programs, network connections, and potential malware.
• System Activity Analysis: By observing processes, operations, and network traffic, users can identify unusual behavior that might indicate a hacked system.
• Filtering Capabilities: Procmon's filtering options enable users to focus on specific processes (like Discord or Shore Device Manager) or types of activity (like network operations) to pinpoint suspicious activity.
• Identifying Malware Indicators: Unusual network connections to malicious IPs or the loading of unrecognized third-party DLLs can be indicators of a compromised system.
• Threat Locker Sponsorship: The video mentions Threat Locker as a sponsor, highlighting its zero-trust security solution with behavioral protection and access control features for enterprises.