This talk will present a series of shell scripts that can be used for live analysis as part of Linux incident response. These scripts can be used to collect large amounts of information with minimal disturbance to the subject system. Using the results from these scripts the investigator can determine if an incident occurred and dead analysis is justified. No prior knowledge of writing bash scripts is required of attendees.

Back to GrrCON 2015 video list