Introduction to process injection in Linux

akamai.com/blog/securit...

Credits Ori David

#infosec #linux

Best read for today - #Microsoft exposes how a Russian #APT threat actor tied to the FSB compromised and used other APT threat actors - www.microsoft.com/en-us/securi... #cyberespionage #malware

Almost embarrassed to post this, but I've always used Fiddler or Burp for capturing things like this...

I didn't have admin rights and was trying to capture network traffic from a pop-up, so Dev Tools wasn't working

Apparently this is built into Chrome/Edge! So cool :)

edge://net-export/

While there are some awesome methods to detect web shells with Yara, sometimes structured data can help solve the case. In this oversimplified example, I go over how you can use two artifacts with Velociraptor to help you find evil on your Linux server.

#dfir #blueteam #cybersecurity