Learn how to implement real-time server monitoring using OSSEC, an open-source host-based intrusion detection system. Explore OSSEC's features including log analysis, integrity checking, rootkit detection, time-based alerting, and active response. Follow along with a practical demonstration covering installation on both Linux and Windows systems, setting up the web UI, connecting agents, and simulating malicious events. Gain hands-on experience in configuring and utilizing OSSEC to enhance your server's security posture and detect potential intrusions.
Monitor in Real-Time with OSSEC - See What’s Taking Place in Your Server
Overview
Syllabus
Introduction
What We’ll Be Covering
Prerequisites
Introduction to OSSEC
OSSEC Features
How OSSEC Works
About Our Lab Environment
Practical Demo
Where to Download OSSEC
Install OSSEC
Install lsystemd
Install and Connect Agent and Server
Install the Web UI
Start the Web UI
Install OSSEC on Windows
Running OSSEC For the First Time
Verify the Windows Agent is Running
Simulate Malicious Events
Review the Log Files
Conclusion
Taught by
Linode
