pberba.github.io – An introduction to monitoring and logging in linux to look for persistence.
Tweeted by @TheHackersNews https://twitter.com/TheHackersNews/status/1467766761252548612
Hunting for Persistence in Linux (Part 1): Auditd, Sysmon, Osquery, and Webshells