Linux Security

The Pyramid of Pain and Sandfly

June 20, 2018

There is a great post called The Pyramid of Pain by David Blanco that details the six ways to cause adversaries the most trouble when attacking your network. The Pyramid of Pain is below: We’ve been…

Detecting Linux Binary File Poisoning

June 13, 2018

Let’s talk about Linux binary poisoning. Binary poisoning is tampering with a system command and replacing it with a malicious version. This can be a wholesale replacement with a new file designed to…

Christchurch Hacker Con 2017 Linux Forensics Slides

May 29, 2018

The slides for Craig’s talk on command line Linux Forensics from the 2017 Christchurch Hacker Con can be found here: Christchurch Hacker Con 2017 Linux Digital Forensics Presentation The slides cover…

Linux Malware Persistence with Cron

May 01, 2018

If malware is anything at all, it’s persistent. On Linux, just like Windows, malware once loaded wants to stay loaded. On Windows systems this is usually done with a variety of registry mechanisms.…

Linux Command Line Forensics Presentation at Christchurch Hacker Con 2017

April 26, 2018

Craig Rowland presented last October at the Christchurch HackCon on the topic of using basic command line tools for Linux forensic investigation and threat hunting. His talk focused around detecting…

Christchurch Hacker Con Linux Digital Forensics Video

April 18, 2018

The video of Craig’s talk at the Christchurch Hacker Con has been posted to YouTube. This video covers the slides posted here on the blog which includes using basic Linux command line tools for…