Reply to post:

This NSA, FBI security advisory has four words you never want to see together: Fancy Bear Linux rootkit

sitta_europea Silver badge

On page 35 of the report, after pages and pages and pages of stuff about Linux, we have this little, er, gem:

"Using a keyword list of the terms described in this advisory, a search can be conducted on the strings in the memory capture. Using the Sysinternals® “strings.exe” utility, a file can be created that contains all of the strings in the image:

Strings.exe –o –n 4 –nobanner mem.img > mem_strings.txt"

Whats this ".exe" thingy? :o

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon