Checking and Handling Suspicious Processes

If HSS detects suspicious processes on servers, the processes will be displayed in the suspicious process list but will not trigger alarms. HSS cannot determine whether these processes are trustworthy based on the application process characteristics. To avoid affecting services, you need to check whether the processes can be trusted and add trustworthy ones to the process whitelist.

Checking and Handling Suspicious Processes

Log in to the management console.
In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.

In the navigation tree, choose Server Protection > Application Process Control.

Click the Suspicious Processes tab.

Figure 1 Viewing suspicious processes
Determine whether a suspicious process is malicious based on its information, such as the hash value and file path.
In the row of a process, click Handle in the Operation column.

You can also select multiple suspicious processes and click Batch Handle above the list.
In the dialog box that is displayed, select an action.

Select Add to process whitelist.
Click OK.