Skip to main content

Score Process

Get a score for a process execution profile.

External Documentation

To learn more, visit the EchoTrail documentation.

Basic Parameters

ParameterDescription
HashThe hash of the process.
HostnameThe process's hostname.
Parent NameThe name (or path) of the parent process.
Process nameThe name (or path) of the process being analyzed. For example, C:\Windows\System32\cmd.exe.

Advanced Parameters

ParameterDescription
ChildrenA list of child processes (without paths) spawned by this process.
EnvironmentThe process's environment.
Grandparent NameThe name (or path) of the grandparent process.
Network PortsA list of network ports used by this process.
Record ExecutionLog the process's execution.

Example Output

{
"echotrail_score": 97,
"global": {
"rank": 2,
"host_prev": 99,
"overall_score": 98,
"path_score": 97,
}
}

Workflow Library Example

Score Process with Echotrail and Send Results Via Email

Workflow LibraryPreview this Workflow on desktop