2023/10/23:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427336-0x0e-linux-attack-detection-analysis/7087019-ks-rootkits-ebpf-kovid-analysis

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427385-0x0c-tunnels-pivots-redirectors/4438471-chisel [UPDATED]
  

2023/09/17:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427336-0x10-linux-attack-detection-analysis/6873861-us-rootkits-sshd-dummy-cipher-suite

2023/08/11:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427385-0x0e-tunnels-pivots-redirectors/6660278-sshimpanzee

2023/08/10:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430312-0x03-purplelabs-default-targets/4429223-reverse-shell-backdoor-payloads [UPDATED]

2023/08/09:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430312-0x03-purplelabs-default-targets/6655206-cve-2022-22963-spring-cloud-function-rce

2023/08/05:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430416-0x0a-linux-memory-forensics/6632836-fileless-plugin

2023/08/04:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427317-0x04-introduction-to-the-course/6627113-linux-mitre-att-ck

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430286-0x06-blue-dfir-components-host/6627098-host-clamav

2023/07/19:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427336-0x10-linux-attack-detection-analysis/6525289-us-fileless-scripting-execution
  

2023/07/17:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427336-0x10-linux-attack-detection-analysis/6524685-us-rootkits-oh-my-father

2023/07/12:

• The overall experience around semi-automated memory forensics experience has been improved greatly

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427384-0x08-establishing-baseline-vs-attack-vectors/4438853-linker-ld_preload [UPDATED]

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430416-0x0a-linux-memory-forensics/6502921-forensics-with-volatility-3

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430416-0x0a-linux-memory-forensics/4438837-forensics-with-volatility2

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430416-0x0a-linux-memory-forensics/4438835-memory-acquisition [UPDATED]

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430416-0x0a-linux-memory-forensics/6408099-building-volatility-2-linux-profiles

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430416-0x0a-linux-memory-forensics/6503903-building-volatility-3-isf-json

2023/07/10:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430416-0x0a-linux-memory-forensics/6490944-linux-report-sections

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430286-0x06-blue-dfir-components-host/4438402-host-tracee-syscall-tracing [UPDATED]

2023/06/22:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427336-0x10-linux-attack-detection-analysis/5963551-ks-rootkits-bad-bpf-trip

2023/04/17:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427336-0x10-linux-attack-detection-analysis/6018906-ks-rootkits-in-memory-lkm-loading

2023/04/07:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427336-0x10-linux-attack-detection-analysis/5949506-ks-rootkits-xdp-udp-backdoor

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427336-0x10-linux-attack-detection-analysis/5949497-ks-rootkits-ftrace-hooking-1

2023/04/06:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430312-0x03-purplelabs-default-targets/5960559-remote-heap-exploitation

2023/04/04:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427385-0x0e-tunnels-pivots-redirectors/5947615-reverse-ssh

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1430312-0x03-purplelabs-default-targets/5947855-cve-2022-2588

2023/04/01:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427326-0x0d-linux-shells-c2-implants/5946619-sliver-in-details

2023/03/25:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427336-0x10-linux-attack-detection-analysis/5806299-ks-rootkits-xt_conntrack-ko-infection

2023/02/24:

• https://edu.defensive-security.com/view/courses/linux-attack-live-forensics-at-scale/1427336-0x10-linux-attack-detection-analysis/5704325-us-rootkits-zombie-ant-farm-pypreloader-1