Linux Process Running with Hidden Binary Name Attack
文章探讨了Linux系统中隐藏进程二进制文件的恶意攻击,并通过视频演示如何识别和调查此类活动。同时介绍了Sandfly无代理安全平台用于快速检测此类威胁的方法。 2024-12-29 21:5:22 Author: sandflysecurity.com(查看原文) 阅读量:1 收藏

Sandfly Blog

Hidden process binaries on Linux are often malicious. In this video we describe what this attack is, why processes with hidden binaries are usually up to no good, and command line forensics you can use to investigate the activity. We also show you how to quickly find this attack with Sandfly's agentless Linux EDR and security platform.

Sandfly is able to find this and many other types of Linux attacks without deploying any endpoint agents. Get your free license today or contact us for more information.



文章来源: https://sandflysecurity.com/blog/linux-process-running-with-hidden-binary-name-attack
如有侵权请联系:admin#unsafe.sh