1. A method for detecting malicious activity comprising: receiving information indicating a first process being executed, the first process including a plurality of first process components; receiving information specific to at least one of the plurality of first process components; determining whether the first process exhibits malicious behavior; determining whether a second process separate from the first process exhibits malicious behavior, the second process including second process components; determining whether one of the second process components is the same as one of the first process components when the first and second processes exhibit malicious behavior; and in the event it is determined that one of the second process components is the same as one of the first process components when the first and second processes exhibit malicious behavior, implementing a predetermined action.