This guide provides a comprehensive overview of Linux persistence mechanisms, focusing on scheduled tasks and jobs. It covers: 1. Introduction to persistence in cybersecurity 2. Detailed explanation of T1053 - Scheduled Task/Job technique 3. In-depth analysis of T1053.003 (Cron) and T1053.002 (At) persistence methods 4. Step-by-step instructions on setting up these persistence mechanisms 5. Detection strategies using Elastic SIEM and pre-built rules 6. Hunting techniques using ES|QL and OSQuery 7. Discussion on other persistence methods like Anacron, Fcron, Task Spooler, and Batch The guide aims to educate defenders and security researchers on Linux persistence techniques, their implementation, detection, and mitigation strategies.
FEATURES
This tool is not verified yet and doesn't have listed features.
Did you submit the verified tool? Sign in to add features.
Are you the author? Claim the tool by clicking the icon above. After claiming, you can add features.
ALTERNATIVES
The Cloudflare Learning Center provides educational resources covering various cybersecurity and internet-related topics, including DDoS attacks, CDNs, DNS, web application security, serverless computing, encryption protocols, bots, cloud computing, Zero Trust security, SASE, networking, data privacy, video streaming, email security, and AI.
A comprehensive cheat sheet for using JtR (John the Ripper), a password cracking tool.
A comprehensive guide to hardening OpenLDAP on Linux using AppArmor and systemd, providing a defense in depth approach to securing LDAP deployments.
A comprehensive guide to securing Industrial Control Systems (ICS) from cyber threats, published by NIST.
A comprehensive PowerShell cheat sheet covering various tasks and techniques for file management, process management, network operations, and system administration.
A comprehensive guide for system administrators to detect and identify potential security threats on Windows 2000 systems.