Forensics Archives

Defeating Log Tampering with Journald Forward Sealing (FSS)

September 10, 2026

Attackers often wipe Linux logs to hide their tracks. This guide shows you how to use Journald Forward Sealing (FSS) to cryptographically sign your logs, ensuring their integrity even if your server is compromised.

Security

Manual Web Forensics: Hunting SQLi and Web Shells via CLI Logs

May 17, 2026

Master manual web forensics using Linux CLI tools like grep and awk to detect SQL injection and hidden web shells in your server logs during an incident.

Security

Hunting Rootkits: A Practical Guide to Linux RAM Forensics with Volatility 3

April 26, 2026

Move beyond basic logs. This practical guide shows you how to use Volatility 3 to capture Linux RAM and uncover the most stealthy rootkits and hidden processes.

Security

Linux Incident Response: 6 Months of Battle-Tested Survival Tactics

April 4, 2026

A battle-tested Linux incident response workflow. Learn how to use busybox-static and auditd to detect server breaches and handle high-pressure forensic investigations.