Shrewd Research_
← All papers
Paper 013·Digital Forensics·July 2018

Leveraging Relocations in ELF-Binaries for Linux Kernel Version Identification

M. Bhatt, I. Ahmed

↗ Open paper

Abstract

Uses relocation entries in ELF binaries to fingerprint Linux kernel versions from memory images, enabling forensic tools to apply correct kernel profiles during memory analysis.

Research record

This page summarizes the public research record and links to the authoritative paper source. Propose a replication or report a discrepancy to b1oo@shrewdsecurity.io.