Immutable File Attack Persistence on Linux
Immutable files on Linux can be abused by malware and hackers to remain on a system. Learn more about this threat in this video.
Sandfly Security - Agentless Linux EDR and Incident Response : Published Updated
06 January 2025
Processes running with an immutable binary are nearly always malware on Linux. Learn what this attack is, how to automatically detect it, and command line forensics you can use to investigate suspicious processes using this attack tactic.
Sandfly is able to find this and many other types of Linux attacks without deploying any endpoint agents. Get your free license today or contact us for more information.
Full transcript available here.
Immutable files on Linux can be abused by malware and hackers to remain on a system. Learn more about this threat in this video.
Hidden binaries on Linux are often malware or intruder activity. Learn more about this threat and how to detect it here.
Linux malware often deletes its binary from the disk to evade detection and analysis. Learn how to detect and respond to this attack in this video.