Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.
SECRET//ORCON//NOFORN
6 Process
Description
The “process” noun takes a process name parameter that all of the
corresponding verbs are applied against. All supported verbs are related to
target system process status and metadata.
Usage
process(<process name|*>).<verb data>
Example
process(wireshark.exe).exists
process(*).has_loaded(wireshark.dll)
The above examples show process with both a specific process and the
special “*” process.
93
SECRET//ORCON//NOFORN