Navigation section

unsigned processes

About this tag
The tag 'unsigned processes' on WindowsForum.com covers discussions about detecting and monitoring software that lacks a valid digital signature. A featured thread presents a PowerShell-based virus detector script for Windows 10 that scans running processes, filters out trusted signed binaries, and generates hashes for unsigned processes. These hashes are checked against VirusTotal's API, and if multiple security indicators are found, the hash is added to a blacklist. This approach helps identify potentially malicious unsigned executables by leveraging community threat intelligence. The content focuses on practical scripting for security monitoring, emphasizing the role of unsigned processes as a risk indicator in Windows environments.
  1. Neemobeer

    Windows 10 Windows 10 Powershell based virus detector

    Here's a neat script I put together today. If added as a scheduled task it will loop and monitor running processes. The only thing needed is to sign up for an account on virustotal.com to get an API key then replace the F's with your api key Function Get-ProcessReport([string]$FilePath...
    • Neemobeer
    • Thread
    • antivirus api keys automation blacklist configuration hashing logging malware notifications powershell process monitoring scripting security task scheduler unsigned processes virus detection virustotal whitelist windows 10
    • Replies: 4
    • Forum: Programming and Scripting
Back
Top