incident-response Archives

Linux Digital Forensics: Recovering Evidence with Autopsy and TSK

May 23, 2026

Go beyond simple commands. Learn how to use Autopsy and The Sleuth Kit to perform deep-dive digital forensics on Linux, recover deleted evidence, and map out attacker timelines.

Security

Hunting Rootkits: A Practical Guide to Linux RAM Forensics with Volatility 3

April 26, 2026

Move beyond basic logs. This practical guide shows you how to use Volatility 3 to capture Linux RAM and uncover the most stealthy rootkits and hidden processes.

Security

Linux Incident Response: 6 Months of Battle-Tested Survival Tactics

April 4, 2026

A battle-tested Linux incident response workflow. Learn how to use busybox-static and auditd to detect server breaches and handle high-pressure forensic investigations.

Security

Stop the Guesswork: Using Auditd for Linux Incident Response

March 30, 2026

Move beyond basic Linux logging. This guide shows you how to use Auditd to track file modifications and command execution at the kernel level to solve production incidents faster.