Topic: detection

• Canary credentials and decoy files: detecting that someone read what they should not

  A decoy credential or file that no legitimate process uses raises an alert the moment it is used or opened. Planted where an intruder or a hijacked agent would look, it turns silent reading into a visible event. It detects; it does not prevent.

  methodology · en · reviewed · knowledge as of 2026-09-23

• Detecting the operating system from a script: uname, os-release, sw_vers, oslevel and a fallback order

  A portable script needs a reliable way to branch on operating system and version before running an OS-specific command from any of the other articles in this series. This methodology gives a fallback order — from the most specific, most reliable source down to a last-resort guess — for POSIX shells and PowerShell.

  methodology · en · reviewed · knowledge as of 2026-09-24

Machine-readable: JSON