Blog
Linux Malware Persistence with Cron
If malware is anything at all, it’s persistent. On Linux, just like Windows, malware once loaded wants to stay loaded. On Windows systems this is usually done with a variety of registry mechanisms.…
Detect Linux Loadable Kernel Module Stealth Rootkits Agentlessly with Sandfly
Watch Sandfly’s agentless intrusion detection and threat hunting technology detect a Linux stealth rootkit. Sandfly automates the investigation and alerting of Linux rootkit compromises so you can…
Linux Command Line Forensics Presentation at Christchurch Hacker Con 2017
Craig Rowland presented last October at the Christchurch HackCon on the topic of using basic command line tools for Linux forensic investigation and threat hunting. His talk focused around detecting…
Christchurch Hacker Con Linux Digital Forensics Video
The video of Craig’s talk at the Christchurch Hacker Con has been posted to YouTube. This video covers the slides posted here on the blog which includes using basic Linux command line tools for…