SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsAuditing your system and network covers an important aspect of security, detection. It is your last line of defense. It is crucial that you have in place a means of determining the state of your system and to detect unauthorized logins and system changes. To accomplish this there are several programs and utilities that are made available but using them all on a daily basis and over a period of time can be an over whelming task if you don't design a good strategy. The design must be simple enough, yet effective, so that it can be used regularly and over a long period of time. In this paper I will talk about the various programs and utilities that can be used to audit your Linux system and how to put them all together in one script to make daily system auditing a little easier.