News for hackers. Stuff that matters.

A comment on From stolen laptop to inside the company network. Parent comment

Re:From stolen laptop to inside the company network by not1ofU on Wednesday July 28, 2021 @06:09PM (#27990406)
As I mentioned above, the SOC team can detect the exact process ID for these app really easily. No plausible deniability.
[ Parent | on HN ]
Re:From stolen laptop to inside the company network by CameronNemo on Thursday July 29, 2021 @12:04PM (#27998043)
What do you mean by process ID? A PID seems like a useless bit of information. Now an app bundle or process executable checksum... Seems more useful. But couldn't you build the app from source and add a but of random data into the executable?
[ Parent | on HN ]