VoidLink on-disk footprint

# masqueraded agent + DDoS modules
sudo ls -la /usr/local/bin/.systemd-network-monitor /usr/local/bin/.fleet-* 2>/dev/null
# persistence unit + boot cron
sudo ls -la /etc/systemd/system/systemd-network-monitor.service 2>/dev/null; sudo crontab -l 2>/dev/null | grep -F systemd-network-monitor
# userland rootkit hook + state directory
sudo grep -s LD_PRELOAD /etc/systemd/system/systemd-network-monitor.service; sudo ls -la /var/cache/systemd-network/ 2>/dev/null