Reply to post:

Meet the Great Duke of... DLL: Microsoft shines light on Astaroth, a devilishly sneaky strain of fileless malware

Anonymous Coward
Anonymous Coward

One of the biggest misconception about *nix. The fact that many things can be accessed with a file-like API doesn.t mean they are exactly like a file, nor that something that say, monitors new file on disk will catch accesses to other types of objects, since the code path inside the kernel is different.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon