Linux Process Running with Hidden Binary Name Attack
A Linux process running as a hidden binary name is often malware. Learn about this Linux threat and how to detect it here.
Sandfly Security - Agentless Linux EDR and Incident Response : Published Updated
Linux attackers and malware often hide their binary payloads. In this video we'll discuss what this threat is, why it is done, and how to find processes running with hidden binaries using command line forensics.
In this video we cover:
Sandfly is able to find this and many other types of Linux attacks without deploying any endpoint agents. Get your free license today or contact us for more information.
Transcript available on the YouTube video above.
A Linux process running as a hidden binary name is often malware. Learn about this Linux threat and how to detect it here.
Having too many SSH keys on Linux presents a credential theft and backdoor risk. Learn more about this threat and how to find it.
Linux malware will often run from the /dev/shm RAM disk to evade detection and destroy itself to hide evidence. Learn more in this video about how to...