Rootkits

Detecting Linux Binary File Poisoning

Malware
Rootkits
Linux Security
Linux Forensics
June 13, 2018

Let’s talk about Linux binary poisoning. Binary poisoning is tampering with a system command and replacing it with a malicious version. This can be a wholesale replacement with a new file designed to…

Linux Malware Persistence with Cron

Malware
Rootkits
Linux Security
Linux Forensics
May 01, 2018

If malware is anything at all, it’s persistent. On Linux, just like Windows, malware once loaded wants to stay loaded. On Windows systems this is usually done with a variety of registry mechanisms.…

Detect Linux Loadable Kernel Module Stealth Rootkits Agentlessly with Sandfly

Rootkits
Malware
Videos
Linux Forensics
April 26, 2018

Watch Sandfly’s agentless intrusion detection and threat hunting technology detect a Linux stealth rootkit. Sandfly automates the investigation and alerting of Linux rootkit compromises so you can…

Linux Command Line Forensics Presentation at Christchurch Hacker Con 2017

Malware
Rootkits
Linux Security
Linux Forensics
April 26, 2018

Craig Rowland presented last October at the Christchurch HackCon on the topic of using basic command line tools for Linux forensic investigation and threat hunting. His talk focused around detecting…