Linux Investigation (Part 1)

Analyzing a Linux DFIR scenario. In Part 1 we find a possible rootkit and tie its appearance to a recent SSH session seen in the system logs.… Continue reading Linux Investigation (Part 1) →