# Linux

- [Artefacts overview](/dfir/linux/_artefacts_overview.md)
- [TTPs analysis](/dfir/linux/ttps_analysis.md)
- [Timestomping](/dfir/linux/ttps_analysis/timestomping.md)