%title Securing Linux
:ops:sec:
%date 2021-05-09 13:22

= Low hanging fruit = 
disable root login
ssh-keys only
1 user per service
firewall unused ports

= Detections =
IDS:
- psad
- bro
- tripwire
- suricata

aggregate logs