Skip to content

Glossary: Logs and Data Sources for Investigations

Hidden file

Also written: dot file

On Linux, a file whose name starts with a dot, such as /tmp/.c or /tmp/.sync, which a normal file listing doesn't show. Attackers use hidden names to keep copied data and tools out of sight.

Where the book teaches it

Related terms

Audit logProcess tree