Submissions from dfir.ch

		macOS Extended Attributes: Case Study (dfir.ch)
		2 points by walterbell 7 months ago \| past
		Dissection of a PHP Backdoor leveraging PHP-win.exe (dfir.ch)
		3 points by malmoeb 8 months ago \| past
		Today I Learned: Binfmt_misc (dfir.ch)
		107 points by malmoeb 8 months ago \| past \| 31 comments
		Oh my –. – Suspicious network traffic detected including Ransomware (dfir.ch)
		2 points by malmoeb 8 months ago \| past
		Today I Learned: Binfmt_misc (dfir.ch)
		16 points by weinzierl 8 months ago \| past \| 1 comment
		Linux Capabilities Revisited (dfir.ch)
		214 points by Harvesterify 9 months ago \| past \| 42 comments
		The 'Invisibility Cloak' – Slash-Proc Magic (dfir.ch)
		76 points by lapnect on Nov 8, 2024 \| past \| 15 comments
		[s\|l]trace - Linux Malware Analysis (dfir.ch)
		2 points by el_duderino on Feb 1, 2024 \| past