HowlingWolf IR tool for Hardening Project and incident response purpose operate anywhere in different offline Linux environments current operation: Monitor Change of file-size and name Monitor process alive or dead Port Scan How to Use now creating help option