Posts on RoyceChasehttps://roycechase.com/posts/Recent content in Posts on RoyceChaseHugo -- gohugo.iozh-CN© 2026 Royce ChaseThu, 15 Oct 2026 00:00:00 +0800Linux 应急响应实践：文件属性锁、进程复活与用户态 Rootkithttps://roycechase.com/posts/engineering/linux-rootkit-incident-response/Thu, 15 Oct 2026 00:00:00 +0800https://roycechase.com/posts/engineering/linux-rootkit-incident-response/删不掉、杀后复活、进程不可见，可能来自不同机制。本文沿文件属性、进程托管与动态库预加载三条线索整理 Linux 应急处置过程。Hello Worldhttps://roycechase.com/posts/hello-world/Wed, 14 Oct 2026 00:00:00 +0000https://roycechase.com/posts/hello-world/<p>这是我的第一篇文章。</p>