Default User SSH Authorized Key Risks on Linux

Sandfly Security - Agentless Linux EDR and Incident Response Published Updated

Videos Linux Forensics Education
Default User SSH Authorized Key Risks on Linux
Sandfly Blog

Default User SSH Authorized Key Risks on Linux

09 December 2024

Videos

Default Linux users with SSH authorized keys are a way for attackers to hide backdoor accounts that can avoid detection for some time. In this video we discuss and demonstrate the threat, why it's used, and how to find it with command line tools and automatic discovery with Sandfly, the agentless Linux EDR platform.

Sandfly is able to find this and many other types of Linux attacks without deploying any endpoint agents. Get your free license today or contact us for more information.

Post Tags:

Videos Education Linux Forensics

Share this post:

← Return to Blog
Linux Default User Password Attack Detection and Forensics

Linux Default User Password Attack Detection and Forensics

Sandfly Security - Agentless Linux EDR and Incident Response : 03 December 2024

Learn how to search for and identify default Linux users that have been given backdoor access to systems.

Videos Malware Linux Forensics Education
Read More
Linux Obsolete Password Hash Risks

Linux Obsolete Password Hash Risks

Craig Rowland, Founder and CEO, Sandfly Security : 05 December 2024

Obsolete password hashes on Linux leave users vulnerable to brute force attack. Learn how to find them here.

Videos Malware Linux Forensics Education
Read More
Evasive Linux Malware and Backdoor Detection Presentation

Evasive Linux Malware and Backdoor Detection Presentation

Sandfly Security - Agentless Linux EDR and Incident Response : 14 November 2023

Evasive Linux malware and backdoor detection presentation featuring BPFDoor and command line forensics.

Videos Malware Linux Security Linux Forensics Education Presentations
Read More