About this document
Forensic Insights on WSL Endpoints by MindSmith is a document available to read on EtoBox.
This document discusses investigating Windows Subsystem for Linux (WSL) endpoints from a digital forensics and incident response perspective. It describes what WSL 2 is and the implications for forensic analysts, then details several experiments conducted during a forensic examination of a WSL endpoint, including establishing persistence using Bashrc and systemd, executing reverse shells and downloading files, and lateral movement of files.
- Author
- MindSmith
- Language
- EN