Tim Brown
Tim Brown
### Area Offensive tools ### Parent threat _No response_ ### Finding https://github.com/DavidBuchanan314/dlinject ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference _No response_ ### Component Linux...
### Area Offensive tools ### Parent threat _No response_ ### Finding https://github.com/creaktive/tsh ### Industry reference _No response_ ### Malware reference TSH TINYSHELL ### Actor reference APT31 UNC2891 LightBasin ### Component...
### Area Offensive techniques ### Parent threat _No response_ ### Finding https://buzzchronicles.com/Mollyycolllinss/b/internet/7795/ ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference _No response_ ### Component Linux...
### Area Offensive techniques ### Parent threat _No response_ ### Finding https://grugq.github.io/docs/subversiveld.pdf ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference _No response_ ### Component Linux...
### Area Defensive tools ### Parent threat _No response_ ### Finding https://blog.blockmagnates.com/hunt-linux-malware-with-cgroups-497733095a94 ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference _No response_ ### Component Linux...
### Area Defensive tools ### Parent threat Persistence, Defense Evasion, Discovery, Command and Control ### Finding https://github.com/Gui774ume/ebpfkit-monitor ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference...
### Area Offensive tools ### Parent threat Lateral Movement, Command and Control ### Finding https://github.com/aojea/netkat ### Industry reference uses:BPF ### Malware reference _No response_ ### Actor reference _No response_ ###...
### Area Offensive techniques ### Parent threat Persistence, Defense Evasion ### Finding https://grugq.github.io/docs/ul_exec.txt ### Industry reference attack:T1055:Process Injection attack:T1055.008:Ptrace System Calls attack:T1055.012:Process Hollowing attack:T1134.004:Parent PID Spoofing ### Malware reference _No...
### Area Offensive techniques ### Parent threat Persistence, Defense Evasion ### Finding https://magisterquis.github.io/2018/03/11/process-injection-with-gdb.html ### Industry reference attack:T1055:Process Injection attack:T1055.008:Ptrace System Calls attack:T1055.012:Process Hollowing attack:T1134.004:Parent PID Spoofing ### Malware reference _No...
### Area Offensive techniques ### Parent threat Persistence, Defense Evasion ### Finding https://gist.github.com/timb-machine/6177721c3eafba3e95abdf112b2a5902 ### Industry reference attack:T1055:Process Injection attack:T1055.008:Ptrace System Calls attack:T1055.012:Process Hollowing attack:T1134.004:Parent PID Spoofing ### Malware reference _No...