Hunting for Persistence in Linux (Part 1): Auditd, Sysmon, Osquery (and Webshells)

https://pberba.github.io/security/2021/11/22/linux-threat-hunting-for-persistence-sysmon-auditd-webshell/