Process Hash Score
Process hash score is an assessment of process binary hash (file hash) consistency across workloads. For example: A web server farm running Apache that is cloned from the same setup config is expected to have same hash for httpd binaries on all servers. A mismatch is an anomaly.
Lower score indicates, at least one or both of:
-
One or more process hashes are flagged.
-
One or more process hashes are anomalous.
Refer to Process hash anomaly detection for more details.
