Linux Detection Engineering - A primer on persistence mechanisms — Elastic Security Labs

Linux Detection Engineering - A Continuation on Persistence Mechanisms — Elastic Security Labs

Linux Detection Engineering - A Sequel on Persistence Mechanisms — Elastic Security Labs

Linux Detection Engineering - Approaching the Summit on Persistence Mechanisms — Elastic Security Labs

Linux Detection Engineering - The Grand Finale on Linux Persistence — Elastic Security Labs

https://github.com/MatheuZSecurity/D3m0n1z3dShell

• Auto Generate SSH keypair for all users
• APT Persistence
• Crontab Persistence
• Systemd User level
• Systemd Root Level
• Bashrc Persistence
• Privileged user & SUID bash
• LKM Rootkit Modified, Bypassing rkhunter & chkrootkit
• LKM Rootkit With file encoder. persistent icmp backdoor and others features.