Automating Forensic Analysis for Linux Endpoints

Intezer announces a Linux endpoint memory forensics scanner integrated into its Autonomous SOC platform, expanding its automated triage and investigation capabilities beyond Windows. The tool, built in Rust, supports live process memory scanning, injected module detection, recovery of deleted-but-running executables, and proxy/container environments, and can be triggered automatically during alert investigations via XDR or run on-demand; availability includes documentation, downloads, and demo options.