SagaLabs Community Night
Registration
Approval Required
Your registration is subject to host approval.
About Event
SagaLabs Community: Linux Forensics with /proc
A suspicious process is running on your Linux server, but its binary has disappeared from disk. Now what?
For this SagaLabs Community event, we’re joined by Asger Strunk, Principal Incident Responder at InfoGuard. With more than a decade across offensive and defensive security, Asger brings practical tips from his work in incident response.
We’re digging into proc to see what a running Linux system can tell us. Asger will show how to look beyond misleading process names, spot signs of rootkits, and recover deleted binaries while they’re still running.
We hope to see you!