Symbol
Node Type
Description
Action
File downloaded
Compressed file created
Action
Socket / communication used
Action
Monitoring initiated
Action
Process created
Action
Executable file created
Library created
Key created in the registry
Action
Executable file modified
Registry key modified
Action
Executable file mapped for write access
Action
Executable file deleted
Action
Library loaded
Action
Service installed
Action
Executable file renamed
Action
Process stopped or closed
Action
Thread created remotely
Action
Compressed file opened