tailspin works by reading through a log file line by line, running a series of matchers against each line. The matchers recognize patterns you expect to find in a logfile, like dates, numbers, ...
LevelBlue says QuimaRAT uses encrypted plugins, OS-specific persistence, and JNA libraries to control Windows, Linux, and ...