19 lines
225 B
Plaintext
19 lines
225 B
Plaintext
|
%title Securing Linux
|
||
|
|
:ops:sec:
|
||
|
|
%date 2021-05-09 13:22
|
||
|
|
|
||
|
|
= Low hanging fruit =
|
||
|
|
disable root login
|
||
|
|
ssh-keys only
|
||
|
|
1 user per service
|
||
|
|
firewall unused ports
|
||
|
|
|
||
|
|
= Detections =
|
||
|
|
IDS:
|
||
|
|
- psad
|
||
|
|
- bro
|
||
|
|
- tripwire
|
||
|
|
- suricata
|
||
|
|
|
||
|
|
aggregate logs
|