As Linux systems become increasingly popular, malicious programs or ransomware on Linux are also gradually emerging. In this session, we will introduce the impact of Linux malware and how to start Linux threat hunting, as well as the necessity of doing threat hunting on Linux.

In the second part, we will introduce the tools and methods of threat hunting and share how to understand the behavior and purpose of malware through Linux threat hunting. We will also compare the differences or difficulties in doing threat hunting on Windows. Finally, we will share how to extract useful information from it to strengthen the resilience of future defense.