←back to thread

A Linux version of the Procmon Sysinternals tool

(github.com)
166 points LelouBil | 3 comments | 31 Aug 25 22:43 UTC | HN request time: 0.487s | source
Show context
baranul ◴[01 Sep 25 02:46 UTC] No.45088975[source]▶
Expect Microsoft to come out with more Linux tools. The demand, interest, and requests are likely to only increase.
replies(4): >>45090000 #>>45090982 #>>45091533 #>>45092514 #
1. notepad0x90 ◴[01 Sep 25 06:24 UTC] No.45090000[source]▶
They have one of the largest Linux user base out there in Azure. They have their own distro. My favorite Linux memory forensics tool (AVML) is made by them. Sysmon for Linux uses eBPF which makes it a tad-bit more powerful than auditd,etc..

If you can't beat'em join'em!

replies(2): >>45090555 #>>45092836 #
2. hdgvhicv ◴[01 Sep 25 07:56 UTC] No.45090555[source]▶
I guess they managed to get rid of the foot

http://mslinux.org/

3. dotancohen ◴[01 Sep 25 14:14 UTC] No.45092836[source]▶

  > If you can't beat'em join'em!
Microsoft has a history of joining'em to beat'em. Is EEE no longer a memory?