ELF files may contain sections with names beginning with “.debug_”
These sections contain debugging information in DWARF format, added when gcc is invoked with the -g flag.
Linux Persistence: Startup Scripts
2024-11-10 DFIR CTF linux persistence systemd SysV init startup script
Linux Persistence: Cron
2024-11-10 DFIR CTF linux persistence cron
Linux Persistence: User Accounts
2021-06-27 DFIR linux persistence