# Telegraf - System Anomalies \\ Malware

**URL:** <https://community.influxdata.com/t/telegraf-system-anomalies-malware/14616>\
**Category:** Systems\
**Created:** [June 1, 2020, 9:20pm UTC](https://community.influxdata.com/t/telegraf-system-anomalies-malware/14616 "2020-06-01T21:20:50Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![briskik](https://avatars.discourse-cdn.com/v4/letter/b/e274bd/32.png) [@briskik](https://community.influxdata.com/u/briskik)\
**Post date:** [June 1, 2020, 9:20pm UTC](https://community.influxdata.com/t/telegraf-system-anomalies-malware/14616/1 "2020-06-01T21:20:50Z")

</div>

Anyone have any experience with using Influx / Telegraf / Grafana on their windows server environment to visualize / alert on system anomalies or Malware/Ransomware in their environments?

What I could imagine as a few points of interest for alerts are:  
Continuous high CPU  
High change rate of disk usage (while disk is being encrypted)