Welcoming Weak Signals

Context Seekers

Utah Monolith appeared in the desert without any explanation; source: latimes.com

Missed Opportunities

  • A new user foo is created.
  • A script connected to an external IP address 38.124.2.1.
  • Session privilege is elevated.
  • A shell session created a file under /tmp directory.

Welcoming Weak Signals

  • ps
  • followed by netstat
  • followed by who, history, id, lsof, uname in a succession.
  • Jump to 2 different hosts and perform the same.

Conclusion and Reminder

--

--

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Eun-Gyu Kim

Head of Engineering at Confluera. LinkedIn Alumni. Creates for loops and while loops that scale.