Information about network activity of the computer in the Processes section
The Processes section displays the list of processes associated with the detected network activity. By clicking the link with the path to the process, you can open the section of information about this process.
The following information is displayed:
File path—Path to the process file.
Program name—Name of the program that started the process.
File description—Additional information about the detected file.
File size—Size of the detected file.
File version—Version of the detected file.
MD5—MD5 hash of a file.
SHA256—SHA256 hash of a file.
Vendor—Company that released the program related to the process.
Program version—Program version.
Signed by—Author of the certificate containing the digital signature for the detected file.
Signature is valid—Information on whether the digital signature is valid.
Found on the local network—Date and time when the process was detected in the local network.
Found on computers—Number of computers on which this process was detected in the local network.
Computers with similar activity—Number of computers on which a similar process was detected.
Global file popularity—Global popularity of the file that started the process.
Global path popularity—Global popularity of the path by which the process was loaded.
You can click the Process activity link to open the section containing information about the network activity of a process:
Time—Time of the network event.
Details—Path to the process.
User name—Name of the user account that started the process.