Skip to content
Threat Feed
Subscribe

Tag

Fileless-Execution

1 brief RSS
medium advisory

Detection of Fileless Execution via memfd_create on Linux

This brief details a detection strategy for identifying potential fileless execution on Linux platforms by monitoring the memfd_create syscall for anomalous process lineage and execution paths.

linux defense-evasion fileless-execution edr process-lineage
1r 3t