To display DWARF information from an ELF file, objdump can be used with the –dwarf=info flag:
objdump --dwarf=info /path/to/file
Linux Persistence: Startup Scripts
2024-11-10 DFIR CTF linux persistence systemd SysV init startup script
Linux Persistence: Cron
2024-11-10 DFIR CTF linux persistence cron
Linux Persistence: User Accounts
2021-06-27 DFIR linux persistence