Linux Default User Password Attack Detection and Forensics

Sandfly Security - Agentless Linux EDR and Incident Response : Published Updated

Videos Malware Linux Forensics Education
Linux Default User Password Attack Detection and Forensics

 

03 December 2024

Videos
 

Linux ships with default users disabled. But, attackers can activate these accounts to allow backdoor access that can hide for a long time. In this video we discuss this threat, how to find it with command line forensics, and what impacts it can have.

 

Find out if your systems have default user access, plus thousands of other attack traces instantly. Sandfly's agentless EDR for Linux deploys rapidly without any endpoint agents. Get a free license today to try it out.

 

Post Tags:

Videos Linux Forensics Malware Education

Share this post:

← Return to Blog
Linux EDR nologin Shell Rename Backdoor Attack Detection and Forensics

Linux EDR nologin Shell Rename Backdoor Attack Detection and Forensics

Sandfly Security - Agentless Linux EDR and Incident Response : 04 December 2024

Learn how to look for backdoor attacks that replace /sbin/nologin on Linux.

Videos Malware Linux Forensics Education
Read More
Default User SSH Authorized Key Risks on Linux

Default User SSH Authorized Key Risks on Linux

Sandfly Security - Agentless Linux EDR and Incident Response : 09 December 2024

Default Linux users can be used for persistent backdoors. Learn how to spot this risk with command line forensics and automatic threat detection.

Videos Linux Forensics Education
Read More
Evasive Linux Malware and Backdoor Detection Presentation

Evasive Linux Malware and Backdoor Detection Presentation

Sandfly Security - Agentless Linux EDR and Incident Response : 14 November 2023

Evasive Linux malware and backdoor detection presentation featuring BPFDoor and command line forensics.

Videos Malware Linux Security Linux Forensics Education Presentations
Read More