|
|
 |
|
OnLineDFS: A Guided Tour
Background |
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
9 |
10
Based on his suspicions and the evidence already acquired, Miller decides to continue his investigation. He returns to the Running Processes list, shown in Figure 21, to see what other processes are running.
Figure 21 - Running Processes
He notices that mirc.exe is one of the running processes. Miller recognizes mIRC as a very commonly used Internet Relay Chat (IRC) client program. Based on the evidence already gathered, Miller is suspicious that Wallace is using IRC to communicate with a co-conspirator. He selects the link labeled mirc.exe to learn more information about the mIRC process, as he had done previously with WINWORD.EXE.
|
|
|
