Volatility 3 — the rewritten RAM analysis framework. No more profiles, new linux.* plugin syntax, installation, and a practical incident analysis example.
Posts for: #Security
Volatility — Linux RAM Forensics and Analysis
Introduction to Volatility — a framework for analyzing RAM dumps. Profiles, plugins, and a practical example of analyzing a compromised Linux server.
Wazuh SIEM on Linux — Security Monitoring Guide
What is Wazuh and how to use it for Linux server security monitoring. FIM, vulnerability detection, log analysis, Active Response, and Suricata integration.
Suricata IDS/IPS — Network Threat Detection on Linux
What is Suricata and how it works as a next-generation IDS/IPS engine. Installation, rule configuration, and operating modes — passive (IDS) and inline (IPS).
LKRG — Linux Kernel Runtime Protection
How LKRG (Linux Kernel Runtime Guard) works — a kernel module protecting against rootkits and privilege escalation exploits. Installation and comparison with Grsecurity.