Ticket #25 (new new_feature)

Opened 2 years ago

Update Integrity code to monitor memory utilization

Reported by: kindlund Assigned to: kindlund
Priority: normal Milestone: 1.2
Component: HoneyClient::Agent::Integrity Version: none
Severity: none Keywords: integrity, memory, checking
Cc:

Description

Currently, the Integrity code does not monitor when the VM's OS memory utilization exceeds the maximum and starts paging to disk. This activity could indicate that malware is present.

Task: Update the Integrity code to monitor when memory utilization exceeds a specified threshold.

Note: If this happens on a consistent basis regardless of malware, then this indicates the Agent code is not properly releasing memory. It's still a problem nonetheless.

Attachments

Add/Change #25 (Update Integrity code to monitor memory utilization)




Change Properties
Action