'linux-forensics' 검색 결과

Examine Linux authentication logs, shell history, SSH keys, scheduled tasks, and system settings to investigate a compromise. Help reconstruct activity, identify ways attackers maintain access, and document suspicious accounts, files, and configuration changes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating a potentially compromised Linux server
• Finding mechanisms that maintain unauthorized access
• Tracing user activity through logs and command history

Acquire Linux memory with LiME and examine it using Volatility 3. Extract processes, network connections, command history, loaded kernel modules, and signs of injected code to support investigations of compromised Linux systems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Acquiring memory from a compromised Linux system
• Comparing process lists to investigate hidden processes
• Reviewing command history and network connections

Performs Linux memory acquisition using LiME (Linux Memory Extractor) kernel module and analysis with Volatility 3 framework. Extracts process lists, network connections, bash history, loaded kernel modules, and injected code from Linux memory images. Use when performing incident response on compromised Linux systems.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized activity.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized activity.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Parse and analyze Linux auditd logs to detect intrusion indicators including unauthorized file access, privilege escalation, syscall anomalies, and suspicious process execution using ausearch and Python.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Performs Linux memory acquisition using LiME (Linux Memory Extractor) kernel module and analysis with Volatility 3 framework. Extracts process lists, network connections, bash history, loaded kernel modules, and injected code from Linux memory images. Use when performing incident response on compromised Linux systems.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Examine Linux system artifacts including auth logs, cron jobs, shell history, and system configuration to uncover evidence of compromise or unauthorized activity.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.