mitre-attack

Linux Persistence Techniques: Maintaining Access After Initial Compromise

A practical tour of Linux persistence: authorized_keys, cron, systemd, rc.local, and ld.so.preload, plus detection.