When it comes to malware analysis, behavioral analysis is still the most promising and hence most important approach if your goal is to find out as much as possible in a minimum amount of time. To accomplish this, one will typically use one of the classic monitoring tools like Sysinternals’ Process Monitor (procmon) as well as PCAP-generating network sniffers (i.e. Wireshark, Windump, tcpdump, etc). However, there is one ” handicap“ which all of these tools have in common: The presentation of the merely unmanageable amount of data and information being produced. That’s where ProcDOT enters the stage. It processes all of this data and information eventually presenting you with an easy to grasp interactively investigable graph actually considering the chronological aspects. In this terms, regardless if you are already an expert in malware analysis or a beginner scratching on the latter’s surface, ProcDOT enables you to • get an overall guts feeling for an entire situation within a glance, • spot relevant parts and understand the correlation between them in minutes. Sounds like a jack of all trades tool? You’ll be surprised!