Linux Stealth Rootkit Hunting with Command Line Forensics - FIRST 2025 Oslo Cold Incident Response

Опубликовано: 07 Июль 2026
на канале: Sandfly Security
2,251
110

Learn how to hunt for Linux stealth rootkits using command line tools with this presentation given at the FIRST Cold Incident Response Conference in Oslo Norway 2025. Presented by Craig Rowland, this presentation goes over a Chinese stealth rootkit leaked by Phrack magazine and how to find it using common command line tools. We also discuss how to approach rootkit hunting on Linux using practical real-world examples along with options for doing it at scale with Sandfly.

Download the full PDF presentation and access more links here:

https://sandflysecurity.com/blog/linu...

Be sure to subscribe and follow us:

https://www.sandflysecurity.com
  / sandflysecurity  
  / sandfly