Anti Forensic Shell Histroy Deletion
Detect a user linking the dev/null space to shell histroy file to evade shell command histroy from logging. There are few false positive examples.Follow users command history prior.
YARA
Detect a user linking the dev/null space to shell histroy file to evade shell command histroy from logging. There are few false positive examples.Follow users command history prior.
Already have an account?