Podcasts Technology Digital Forensic Survival Podcast DFSP # 414 - CRON Forensics

DFSP # 414 - CRON Forensics

Published: Jan. 23, 2024, 5:37 a.m.

Cron become important and Linux forensics when you\u2019re talking about persistence. Think scheduled tasks if you want a Windows equivalent. The artifact is not that difficult to analyze once you understand the elements to focus on and it is typically readily available. It\u2019s something that you can check out a live system, gather with a collection script, and more and more security appliances are designed to access the artifact as well. I\u2019ll...