Christchurch Hacker Con Linux Digital Forensics Video

Publication Date: 18 April 2018

The video of Craig’s talk at the Christchurch Hacker Con has been posted to YouTube. This video covers the slides posted here on the blog which includes using basic Linux command line tools for intrusion detection and forensics. The talk covers these areas:

  • Suspicious processes
  • Suspicious directories
  • Suspicious files and audit log tampering
  • Other things that are out of place that could indicate a hacker is on a Linux system

Craig will be doing a periodic series on Linux forensics and intrusion detection going forward. Please subscribe to our channel or mailing list to keep updated.

Linux Stealth Rootkit Hunting Video Presentation

Linux Stealth Rootkit Hunting Video Presentation

Video of hunting Linux stealth rootkits with command line tools from the Cold Incident Response Conference 2025.

Read More
Linux Hacked | Linux Hacking | Christchurch Hacker Con 2017 Linux Forensics Slides

Linux Hacked | Linux Hacking | Christchurch Hacker Con 2017 Linux Forensics Slides

The slides for Craig's talk on command line Linux Forensics, Linux Hacked from the 2017 Christchurch Hacker Con can be found here: Christchurch...

Read More
Using Command Line Tools to Find Process Masquerading Linux Malware

Using Command Line Tools to Find Process Masquerading Linux Malware

A video going over the basics of using command line tools on Linux to look into a suspicious masquerading process. Linux intrusion detection for...

Read More