Efficacy of UNIX HIDS

There has been an increase in UNIX-based adversarial activity, as enterprises and users shift towards the platform (WatchGuard, 2017). The focus of this paper is to demonstrate the effectiveness of three separately installed host-based intrusion detection systems (HIDS): OSSEC, Samhain, and Auditd,...

By

Janusz Pazgier

May 15, 2020

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - Women In Russian-speaking Cybercrime_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

November 18, 2024

Women In Russian-Speaking Cybercrime: Mythical Creatures or Significant Members of Underground?

Women’s roles in Russian-speaking cybercrime, though less visible than men’s, are evolving and significant.

Anastasia Sentsova

Anastasia Sentsova

DFIR - Blog - New FOR518- Mac and iOS Forensic Analysis Poster Update_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

November 11, 2024

New FOR518: Mac and iOS Forensic Analysis Poster Update

The latest updates to the Digital Forensics and Incident Response Poster bring a wealth of new sections and enhancements.

Cybersecurity Insights, Digital Forensics, Incident Response & Threat Hunting, Cyber Defense, Cloud Security, Open-Source Intelligence (OSINT), Cybersecurity Leadership, Security Awareness, Artificial Intelligence (AI)

December 18, 2023

Top 15 SANS Summit Talks of 2023

This year, SANS hosted 16 Summits with 209 talks. Here were the top-rated talks of the year.