Auditd for the Masses - Philipp Krenn - Hack in Paris - 2018
Explore the power of Linux Audit daemon and Elastic's Auditbeat in this 46-minute Hack in Paris conference talk. Learn how to effectively monitor, centralize, and visualize audit records for enhanced security. Discover techniques for detecting changes to critical files, identifying potential security policy violations, and combining Auditd events with logs. Gain insights into interactive dashboards that help uncover changes, events, and potential security breaches in real-time. Follow along with live demonstrations covering Ubuntu audit reports, configuration of audit rules, and practical examples. Delve into topics such as SSH login attempts, user activity monitoring, file integrity checks, and machine learning applications in security. Explore the integration with AWS S3 and learn about data management strategies for maintaining a robust security posture.