Linux EDR Detecting Processes Running from Temporary Directory Attack

Linux EDR Detecting Processes Running from Temporary Directory Attack
Publication Date:02 January 2025
 

Linux temp directories are notorious for hosting malware from low-grade to sophisticated. Learn about this threat in the video below, and how to investigate suspicious processes abusing this area.

 

Sandfly is able to find this and many other types of Linux attacks without deploying any endpoint agents. Get your free license today or contact us for more information.

 


Share this post:

 
Linux Process Running with Hidden Binary Name Attack

Linux Process Running with Hidden Binary Name Attack

A Linux process running as a hidden binary name is often malware. Learn about this Linux threat and how to detect it here.

Read More
Linux Duplicate User Password Hash Attack

Linux Duplicate User Password Hash Attack

Learn what duplicate password hash attacks are on Linux and how to detect them.

Read More
Default User SSH Authorized Key Risks on Linux

Default User SSH Authorized Key Risks on Linux

Default Linux users can be used for persistent backdoors. Learn how to spot this risk with command line forensics and automatic threat detection.

Read More