04 · Persistence
Hunting Linux Persistence: Cron, systemd, SSH and More
Where attackers hide persistence on Linux (cron, systemd units and timers, shell startup files, SSH keys, ld.so.preload, PAM, udev, modules) and how to find it.
persistencecronsystemd