Tag

Linux Security

Endpoint protection and investigation for Linux systems.

2 resources

Resources in this tag

Endpoint Security

SSH Authorized Keys Persistence: Detection and Response

SSH authorized_keys persistence detection covers file changes, cloud metadata, key fingerprints, writers, login evidence, scope, containment, and hardening.

Nov 10, 2026

Endpoint Security

Linux eBPF Abuse: Detection and Hardening

Detect Linux eBPF abuse by inventorying loaded programs, maps, links, loaders, capabilities, attachment points, and resulting endpoint behavior.

Nov 10, 2026