Linux Process Running with Hidden Binary Name Attack

Sandfly Security - Agentless Linux EDR and Incident Response : Published Updated

Videos Linux Forensics Education
Linux Process Running with Hidden Binary Name Attack
Publication Date: 29 December 2024
 

Hidden process binaries on Linux are often malicious. In this video we describe what this attack is, why processes with hidden binaries are usually up to no good, and command line forensics you can use to investigate the activity. We also show you how to quickly find this attack with Sandfly's agentless Linux EDR and security platform.

 

Sandfly is able to find this and many other types of Linux attacks without deploying any endpoint agents. Get your free license today or contact us for more information.

 

Post Tags:

Videos Education Linux Forensics

Share this post:

← Return to Blog
Linux EDR Detecting Processes Running from Temporary Directory Attack

Linux EDR Detecting Processes Running from Temporary Directory Attack

Sandfly Security - Agentless Linux EDR and Incident Response : 02 January 2025

A Linux process running from temporary directories is often malware. Learn about this Linux threat and how to detect it here.

Videos Linux Forensics Education
Read More
Default User SSH Authorized Key Risks on Linux

Default User SSH Authorized Key Risks on Linux

Sandfly Security - Agentless Linux EDR and Incident Response : 09 December 2024

Default Linux users can be used for persistent backdoors. Learn how to spot this risk with command line forensics and automatic threat detection.

Videos Linux Forensics Education
Read More
Linux EDR nologin Shell Rename Backdoor Attack Detection and Forensics

Linux EDR nologin Shell Rename Backdoor Attack Detection and Forensics

Sandfly Security - Agentless Linux EDR and Incident Response : 04 December 2024

Learn how to look for backdoor attacks that replace /sbin/nologin on Linux.

Videos Malware Linux Forensics Education
Read More