LPIC-3 Linux Security 326.2 Intruder Detection

Description

In this eBook we step you through in detail the LPIC-3 303 objective 326.2 looking at Linux security using Intruder Detection

LPIC-3 303 Linux Security

The LPIC-3 certification from the LPI is their premium certification for Linux Network Administrators and security is arguably the most valuable certification to have. With Cyber Security at the forefront of everyone’s mind and Linux on the front line of defence, this is the best time to secure your career progression and substantial pay rises.  If we ask any IT Manager what they require most at the moment, we know the Security Professionals will be the answer.

This series of eBooks look at each of the LPI objectives for LPIC-3 303 in detail so nothing is missed and you can study piece by piece. They are priced accordingly so the complete guide will be less than £15.00

Objective 326.2 looks at  Linux Intruder Detection and how we can monitor and detect intruders. this includes:

• Managing the Linux Audit system on CentOS 7 and installing it on Ubuntu
• Tracking user activity even if they use su in place of sudo
• Logging user keystrokes where suspicious activity is active
• Detecting rootkits and malware in Linux using rpm, aide, rkhunter chrootkit and LMD.

Table of contents:

• An Introduction to the Linux Audit System
• Configuring the Audit Daemon and the auditd.conf
• Creating Custom Audit Rules
• Installing the Linux Audit System on Ubuntu
• Auditing User Keystrokes
• Defending your Linux System with AIDE
• Detecting Rootkits in Ubuntu 18.04 with rkhunter
• Installing rkhunter in CentOS 7
• Using chkrootkit on Ubuntu 18.04
• Using chkrootkit on CentOS 7
• Running Cronjobs
• Malware Detection with Maldet