#40 "Check Ports/WinSock"

[Anonymous]

"Monitor Ports/Winsock"

1. The ability to monitor that ports are listening.

The interface should show a selection of ports already
listening, and the processes running on those ports,
similar to the freeware product TCPVIEW from
www.sysinternals.com

2. Also, the "Monitor Service" section should have
a "automatically update to monitor services with a start
state of automatic" checkbox.

[Nobody/Anonymous]

Logged In: NO

As a side note Process check:
# see post above: notified when a (new) program/process
opens a new port.
# notified when a critical program/process stops/restarts?
# notified when a critical program/process memory allocation
/ cpu utilisation of a given process goes above a trigger?
# notified when a program/process starts thats not in a
whitelist (minimum sha-256 hashing)
# notified when a unknown dll (whitelist) is injected into a
process.