How to identify unique services running on only a few devices (anomalous services)?

Modified on Fri, 1 Aug at 12:53 AM

Identifying anomalous services on the devices: Services that are running on only a few systems among a cluster of devices are identified as anomalous.

To find them, go to:
PA > All Anomalies, then search for PA-2022-1012.


This anomaly report is part of Saner CVEM and highlights unique or suspicious services running on select devices in your environment.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article