Instant OSSEC Host-based Intrusion Detection System

A hands-on guide exploring OSSEC HIDS for operational and security awareness

Key Features

• Learn something new in an Instant! A short, fast, focused guide delivering immediate results.
• Install, configure, and customize an OSSEC-HIDS for your environment
• Manage your OSSEC-HIDS robust and comprehensive security checks
• Write your own rules and decoders to enhance alert accuracy and expand operational and security intelligence

Book Description

What you will learn

• Installing OSSEC-HIDS in local, server, and agent mode
• Customizing alerting to increase the signal to noise ratio
• Writing your own rules to extend, enhance, and tailor alerts to your environment
• Writing your own decoders to add context to alerts and active responses
• Learning tips for managing large OSSEC-HIDS installs
• Monitoring command output for security and operational awareness
• Auditing systems for compromise with a sensitivity to performance of those systems
• Configuring Active Response to protect servers from SSH brute force attacks

Who this book is for

This book is great for anyone concerned about the security of their servers-whether you are a system administrator, programmer, or security analyst, this book will provide you with tips to better utilize OSSEC-HIDS. Whether you're new to OSSEC-HIDS or a seasoned veteran, you'll find something in this book you can apply today!

This book assumes some knowledge of basic security concepts and rudimentary scripting experience.