Monitor in Real-Time with OSSEC See What’s Taking Place in Your Server
In part 6 of this Blue Team training series from @HackerSploit, we’ll cover Intrusion detection with OSSEC. OSSEC is an open-source, host-based intrusion detection system (HIDS) that performs log analysis, integrity checking, rootkit detection, time-based alerting, and active response, making it an ideal choice for server monitoring.
Check out the entire Blue Team Series here.
Chapters:
0:00 Introduction
0:41 What We’ll Be Covering
1:47 Prerequisites
1:54 Introduction to OSSEC
4:18 OSSEC Features
5:00 How OSSEC Works
5:35 About Our Lab Environment
6:30 Practical Demo
6:42 Where to Download OSSEC
8:36 Install OSSEC
14:00 Install lsystemd
15:37 Install and Connect Agent and Server
16:11 Install the Web UI
19:55 Start the Web UI
23:23 Install OSSEC on Windows
26:18 Running OSSEC For the First Time
29:30 Verify the Windows Agent is Running
30:52 Simulate Malicious Events
38:08 Review the Log Files
39:55 Conclusion
New to Linode? Get started here with a $100 credit!
Watch Hackersploit’s Red Team series here.
Learn more about using OSSEC.
Subscribe to get notified of new episodes as they come out.
#hackersploit #blueteam #cybersecurity
Product: Blue Team, OSSEC, Intrusion Detection; @HackerSploit
You might also like…
-
Linux Defense Evasion – Hiding Processes | Red Team Series 11-13
In this part of our Hackersploit Security Series we will cover Linux Defense Evasion techniques. -
Recovering from a System Compromise | Top Docs
In this video, Jay showcases several methods of system recovery in the event your Linux system has been compromised by a third-party. -
HackerSploit: Docker Security Essentials
Hackersploit: Docker Security Essentials is a guide to auditing and securing the Docker platform and containers. -
Windows Defense Evasion – Lateral Movement Techniques | Red Team Series 13-13
In the final video of our Hackersploit Red Team series we will take a look at Windows Defense Evasion and lateral movement techniques.
