Does Intelligence.Service is part of Energylog Server Application Suite. We notice this service to generate root-kit alerts because it generates processes on /tmp/systemd-private-xxxxxx- intelligence-scheduler.service-xxxx and /tmp/systemd-private-xxxxxxxx-intelligence.service-xxxxx.
