Linux EDR Default User Password Attack Detection and Forensics

Linux ships with many default users disabled out of the box, but what happens if someone were to give them a password to enable login? Well, it would give them a backdoor user! In this video we explore this threat, how it looks with command line forensics, and how to use Sandfly's agentless Linux EDR to watch your system for this attack to know if it is happening.
Sandfly is able to find this and many other types of Linux attacks without deploying any endpoint agents. Find out more and get a free license below:
www.sandflysec...
Be sure to subscribe and follow us:
/ sandflysecurity
/ sandfly