To understand how a threat moved on a system, a responder must know the role...

It is a system process responsible for the Local Security Authority subsystem.

It is the primary process responsible for the File Explorer UI and the user ' s desktop environment.

It is the Windows Command Processor used for executing batch files.

It is the service control manager that handles the starting of background tasks.