OPSEC 5: Auditing and Scanning скачать в хорошем качестве

OPSEC 5: Auditing and Scanning

In today's video I will be walking you through how to configure auditd and ClamAV. I will demo auditd by creating a honeypot and showing how you can detect if someone has interacted with it. For ClamAV, I'll show you how to setup a directory to automatically scan files placed in it via a bash script and inotify. Lesson Notes: https://citrine-gopher-c75.notion.sit... 00:00 Intro 00:34 Audidt/ClamAV Brief 00:48 Security Status 01:40 More Hardening to Come 01:53 Malware Lesson Series 02:41 Auditd Section Start 02:50 Auditd Demo Intro 03:00 Auditd Technicals 03:32 Auditd is/is not 03:50 Installing Auditd 04:15 Audit Dispatch 05:15 --new flag 05:45 Auditd Early Boot 06:41 Auditd is Foundational 07:33 Enforcing Auditd Examples 08:16 Auditd Honeypot Demo 11:54 Auditd Automation Brief 12:48 Auditd layering 14:20 ClamAV Intro 15:09 ClamAV Install 15:35 ClamAV Configuration 17:30 Scanning Types 17:51 Scanning Stuff 18:40 Scan Differences 19:50 Scan as root no no 20:15 Clamscan 20:40 ClamAV Inotify Demo 21:08 EICAR file 21:49 Inotify 22:45 Setup 23:07 Bash Script Walkthrough 24:29 Clean directory 24:50 Run Demo 25:55 Outro