Qimin Zhao

Author Profile

Claim This Author Profile

Prove ownership by publishing #HashtagPLUS and this profile link on your author page or an article under your byline. A moderator or admin will review the request before it merges into your real HashtagPLUS username.

0 karma0 postsjoined 3 days ago

How to triage Java memory-shell clues without unsafe default heap dumps

🌐 dev.toSource

Disclosure: I maintain Open Investigator at Arvanta Cyber. A suspected Java memory shell is an...

#dev #java #evidence #open #investigator #service #article #ama

3 days ago

How to triage a suspected WebShell without giving AI a shell

🌐 dev.toSource

A suspected WebShell is awkward because the first clue is often weak. You may have one odd request...

#dev #evidence #webshell #file #whether #first #article #englishlanguage

3 days ago

How to investigate suspicious SSH logins without giving AI a shell

🌐 dev.toSource

A lot of Linux incident response starts with a login question, not a malware sample. Someone sees a...

#dev #login #account #evidence #first #files #article #ama

3 days ago

Menu

Qimin Zhao