GNU/Linux Memory Forensics: Is the Compromise Still Live?
It's easy to think of memory forensics purely as a hunt for something malicious. On this case, a GNU/Linux server that had already been through a full attack chain, initial access, privilege escalatio