Verification based on process path integrity

A system comprising:

• a memory comprising instructions;
• and
• a processor configured to execute the instructions which, when executed, cause the processor to:
• extract, from a firmware associated with a mobile computing device, a set of legitimate process executable paths;
• retrieve, from the mobile computing device, diagnostic process information of processes running on the mobile computing device;
• identify, based on determining a target executable process of the diagnostic process information retrieved from the mobile computing device is matchless with the set of legitimate process executable paths, the target executable process as a potentially suspicious process;
• analyze the potentially suspicious process to determine legitimacy;
• and
• trigger, based on determining the potentially suspicious process as an illegitimate process, an alert.

A non-transitory machine-readable storage medium comprising machine-readable instructions for causing a processor to execute a method, the method comprising:

• extracting, from a firmware associated with a mobile computing device, a set of legitimate process executable paths;
• retrieving, from the mobile computing device, diagnostic process information of processes running on the mobile computing device;
• identifying, based on determining a target executable process of the diagnostic process information retrieved from the mobile computing device is matchless with the set of legitimate process executable paths, the target executable process as a potentially suspicious process;
• analyzing the potentially suspicious process to determine legitimacy;
• and
• triggering, based on determining the potentially suspicious process as an illegitimate process, an alert.