DFSP # 368 - SVCHOST

07/03/2023 15 min
DFSP # 368 - SVCHOST

Listen "DFSP # 368 - SVCHOST"

Episode Synopsis

This week is a guide to understanding SVCHOST from a DFIR point of view. It is one of the most abused Windows processes, and having a firm working knowledge for investigations is essential.