Investigating Suspicious Kernel Threads on Linux! | DFIR

Hello,
Kernel threads are not an exception for adversaries to leverege! As malware could be masqueraded kernel threads to evade the process forensics. By using some nnuances it can also be discovered. I tried explaining those processes in this video.

============
Time Frames
============
00:00 Intro
00:33 Explaining the kernel threads & its properties
19:28 Pragmatic approach to spot malware masqueraded as kernel thread
49:11 Outro

==============
Connect Me On
==============

#kernelthread #dfir #memoryforensics