Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    Only $11.99/month after trial. Cancel anytime.

    Instant OSSEC Host-based Intrusion Detection
    Instant OSSEC Host-based Intrusion Detection
    Instant OSSEC Host-based Intrusion Detection
    Ebook143 pages1 hour

    Instant OSSEC Host-based Intrusion Detection

    By Brad Lhotsky

    ()

    Read preview

    About this ebook

    Filled with practical, step-by-step instructions and clear explanations for the most important and useful tasks. A fast-paced, practical guide to OSSEC-HIDS that will help you solve host-based security problems. This book is great for anyone concerned about the security of their servers-whether you are a system administrator, programmer, or security analyst, this book will provide you with tips to better utilize OSSEC-HIDS. Whether you’re new to OSSEC-HIDS or a seasoned veteran, you’ll find something in this book you can apply today! This book assumes some knowledge of basic security concepts and rudimentary scripting experience.
    LanguageEnglish
    PublisherPackt Publishing
    Release dateJul 26, 2013
    ISBN9781782167655
    Instant OSSEC Host-based Intrusion Detection

    Related to Instant OSSEC Host-based Intrusion Detection

    Related ebooks

    Security For You

    View More
    View More

    Related podcast episodes

    Related articles

    • Article

      Use Home Assistant NodeRED devices

      May 31, 2022

      NodeRED is an open source graphical programming environment that can be used to complete a large number of tasks. Graphical programming languages tend to be more intuitive than textual programming languages and can be easier to learn. Support is buil

      5 min read

    • Article

      Network Attacks

      Sep 21, 2020

      Though less common than malware and social engineering, network-based attacks are still a threat to every computer and mobile user, and everyone should have at least a basic understanding of what they are and how to avoid them. So this month let’s lo

      4 min read

    • Article

      “Someone Who Under Takes A Ransomware Attack Isn’t A Hacker, They’re An Attacker”

      Aug 12, 2021

      If you’ve ever attended an infosec or cybersecurity event, you will no doubt have noticed the preponderance of “Hacking is NOT a Crime” stickers. In 2018, some 500 such stickers were handed out at the DEF CON 26 event, the following year 5,000 were d

      7 min read

    • Article

      Hacker’s Manual

      Mar 2, 2021

      Hacker’s Manual
      1 min read

    • Article

      Secure Your Servers

      Apr 7, 2020

      No matter what you do with your Linux servers you will almost certainly have SSH access to them. Indeed this might be the only access you have, so it would be wise to secure it. Naturally, you will already be using a strong password and will have alr

      4 min read

    • Article

      Staying Safe In The Cloud

      Jul 22, 2019

      Staying Safe In The Cloud
      4 min read

    • Article

      Has Your Phone Been HACKED?

      Aug 3, 2022

      Most problems with our smartphones, such as the screen going blank or an app failing to open, are nothing to worry about and can be fixed with a quick recharge or restart. But sometimes there are more sinister reasons for our devices misbehaving, esp

      5 min read

    • Article

      Hack The Planet/Parrot

      May 31, 2022

      Hack The Planet/Parrot
      2 min read

    • Article

      Tsurugi Linux 2019.1

      Sep 24, 2019

      Tsurugi Linux 2019.1
      2 min read

    • Article

      Ransomware Can Hold Cities Hostage. Will Cyber Insurance Help?

      Dec 18, 2019

      Cyber insurance offers municipalities peace of mind in the event of a cyberattack. But does it embolden hackers?

      3 min read

    • Article

      In Cyberwar There Are No Rules

      Sep 10, 2018

      In Cyberwar There Are No Rules
      13 min read

    • Article

      What If?

      Aug 10, 2021

      What If?
      16 min read

    • Article

      Hack Your Bluetooth

      Jun 2, 2021

      Hack Your Bluetooth
      4 min read

    • Article

      Best VPNs for Android

      Mar 13, 2020

      Best VPNs for Android
      5 min read

    • Article

      Sherlock

      May 31, 2022

      Sherlock
      1 min read

    Related categories

    Reviews for Instant OSSEC Host-based Intrusion Detection

    0 ratings

    0 ratings0 reviews

    What did you think?

    Tap to rate

    Review must be at least 10 words

      Book preview

      Instant OSSEC Host-based Intrusion Detection - Brad Lhotsky

      Table of Contents

      Instant OSSEC Host-based Intrusion Detection

      Credits

      About the Author

      About the Reviewers

      www.PacktPub.com

      Support files, eBooks, discount offers and more

      Why Subscribe?

      Free Access for Packt account holders

      Preface

      What this book covers

      What you need for this book

      Official documentation

      The community

      Commercial support

      Who this book is for

      Conventions

      Reader feedback

      Customer support

      Downloading the example code

      Errata

      Piracy

      Questions

      1. Instant OSSEC Host-based Intrusion Detection

      Installing OSSEC (Simple)

      Getting ready

      How to do it...

      How it works...

      There's more…

      Binary installations

      Starting OSSEC at boot

      Configuring an OSSEC server (Simple)

      Getting ready

      How to do it...

      How it works...

      Getting agents to communicate (Simple)

      Getting ready

      How to do it...

      How it works...

      There's more...

      Managing agent keys automatically

      Writing your own rules (Simple)

      Getting ready

      How to do it...

      How it works...

      There's more...

      Decoding event data

      Detecting SSH brute-force attacks (Intermediate)

      Getting ready

      How to do it...

      How it works...

      Configuring the alerts (Simple)

      Getting ready

      How to do it...

      How it works...

      There's more...

      What is rule 1002 and why is it spamming me?

      Playing nice with others

      File integrity monitoring (Simple)

      Getting ready

      How to do it...

      How it works...

      There's more...

      Monitoring the Windows registry

      Working with prelinking

      Monitoring command output (Intermediate)

      Getting ready

      How to do it...

      How it works...

      Detecting rootkits and anomalies (Simple)

      Getting ready

      How to do it...

      How it works...

      There's more...

      Auditing your systems

      Increasing paranoia

      Introducing active response (Intermediate)

      Getting ready

      How to do it...

      How it works...

      Verifying alerts with active response (Advanced)

      Getting ready

      How to do it...

      How it works...

      Instant OSSEC Host-based Intrusion Detection

      Instant OSSEC Host-based Intrusion Detection

      Copyright © 2013 Packt Publishing

      All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

      Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

      Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

      First published: July 2013

      Production Reference: 2160813

      Published by Packt Publishing Ltd.

      Livery Place

      35 Livery Street

      Birmingham B3 2PB, UK.

      ISBN 978-1-78216-764-8

      www.packtpub.com

      Credits

      Author

      Brad Lhotsky

      Reviewers

      JB Cheng

      Scott Miller

      Mark Stanislav

      Acquisition Editor

      Mary Nadar

      Commissioning Editor

      Meeta Rajani

      Technical Editor

      Hardik B. Soni

      Copy Editors

      Insiya Morbiwala

      Gladson Monteiro

      Project Coordinator

      Esha Thakker

      Proofreader

      Lindsey Thomas

      Graphics

      Ronak Dhruv

      Production Coordinator

      Nilesh R. Mohite

      Cover Work

      Nilesh R. Mohite

      Cover Image

      Ronak Dhruv

      About the Author

      Brad Lhotsky started working with Unix systems professionally in 1998 as a system administrator, database administrator, network engineer, programmer, and security administrator. He has been an active member of the OSSEC HIDS community since 2004. He currently administers one of the largest OSSEC HIDS deployments in the world!

      First, I'd like to thank my beautiful wife, April, for inspiring and supporting me in everything I do.

      Thanks also to Clinton, Tim, Wouter, and Willem for their helpful suggestions.

      About the Reviewers

      JB Cheng has over 20 years' experience in the networking and security industry. His professional experiences include working for the IBM RTP Network Management Division, AT&T Wireless Data Division, and WatchGuard Unified Threat Management appliance development group. Since 2007, he has joined Trend Micro as a Senior Staff Engineer and is currently the OSSEC project manager responsible for OSSEC releases and for engaging with the open source community. His personal blog can be found at http://ossec-notebook.blogspot.com/.

      I would like to thank Daniel Cid for creating OSSEC and making it an open source project. Without him you wouldn't be reading this book today, period.

      Scott Miller is a Linux administrator, security professional, and IT professional in Raleigh, North Carolina. His expertise includes system administration, Apache/nginx, Amazon web services, security, and Linux. He has worked in large-scale academia IT environments as well as in the enterprise private sector in mission-critical environments. Currently employed

      Enjoying the preview?
      Page 1 of 1