In TeamTNT intrusions, the hilde user has been added to systems in some cases as a persistence mechanism. This is likely in reference to the HildeGard member of the group.
hilde user
0001-01-01
Recent Posts
Linux Persistence: Startup Scripts
2024-11-10 DFIR CTF linux persistence systemd SysV init startup script
Linux Persistence: Cron
2024-11-10 DFIR CTF linux persistence cron