-
prctl -
setproctitle(where available) -
unshare -
mount -
umount -
kill(esp. killing security tools) -
signal -
sigaction
BLUE TEAM / MALWARE REVERSE / ANALYSIS / STATIC / DANGEROUS FUNCS / LIBC
prctl
setproctitle (where available)
unshare
mount
umount
kill (esp. killing security tools)
signal
sigaction