System and method of determining malicious processes

摘要: Systems, methods, and computer-readable media for managing compromised sensors in multi-tiered virtualized environments. A method includes determining a lineage process within the network then evaluating, through knowledge of lineage, source command that initiated process. The capturing data from plurality capture agents at different layers network, each agent configured to observe activity particular location developing, based on data, associated with and, identifying an anomaly network.