Velocidex / velociraptor-docs

Documentation site for Velociraptor
Other
35 stars 192 forks source link

Add nethogs artifact monitoring bandwidth per process on Linux #881

Closed misje closed 1 month ago

misje commented 1 month ago

In order to detect a process by its bandwidth usage, nethogs is an excellent tool. This artifact runs nethogs for a given period of time and reports the results.