Monitor in Real-Time with OSSEC See What’s Taking Place in Your Server
In part 6 of this Blue Team training series from @HackerSploit, we’ll cover Intrusion detection with OSSEC. OSSEC is an open-source, host-based intrusion detection system (HIDS) that performs log analysis, integrity checking, rootkit detection, time-based alerting, and active response, making it an ideal choice for server monitoring.
Check out the entire Blue Team Series here.
Chapters:
0:00 Introduction
0:41 What We’ll Be Covering
1:47 Prerequisites
1:54 Introduction to OSSEC
4:18 OSSEC Features
5:00 How OSSEC Works
5:35 About Our Lab Environment
6:30 Practical Demo
6:42 Where to Download OSSEC
8:36 Install OSSEC
14:00 Install lsystemd
15:37 Install and Connect Agent and Server
16:11 Install the Web UI
19:55 Start the Web UI
23:23 Install OSSEC on Windows
26:18 Running OSSEC For the First Time
29:30 Verify the Windows Agent is Running
30:52 Simulate Malicious Events
38:08 Review the Log Files
39:55 Conclusion
New to Linode? Get started here with a $100 credit!
Watch Hackersploit’s Red Team series here.
Learn more about using OSSEC.
Subscribe to get notified of new episodes as they come out.
#hackersploit #blueteam #cybersecurity
Product: Blue Team, OSSEC, Intrusion Detection; @HackerSploit
You might also like…
-
Network Traffic Analysis with Wireshark – Blue Team Series with Hackersploit
This series will cover Blue Team techniques and tools used by security analysts and SOC teams, such as Wireshark. -
How to Reset SSH Host Keys when Deploying Linux Templates in Proxmox
In this video, we'll go over how to create a new set of SSH host keys for each instance that you create from an image. -
Intrusion Detection with Snort – Blue Team Series with Hackersploit
In this second episode of our Blue Team series @HackerSploit introduces intrusion detection with Snort, a powerful intrusion detection app. -
UFW Full Tutorial | HackerSploit Linux Security
In this video, HackerSploit will show how UFW is used through the command line, allowing you to make firewall configurations easy.
