Linux platform security

Record the kernel, distribution, runtime, compatibility layer, container or namespace state, and active policy before interpreting behavior.

Topic routing

• Review guide for execution-stack classification, privilege and isolation boundaries, threat models, evidence, and result format.
• Repository resources for Wine, kernel, WSL, and forensic source selection.

Use reverse-engineering-tools for binary reconstruction, graphics-api-hooking for rendering or capture, and dma-attack-techniques for device-originated memory access.