it-scholar
Back to seminars

Linux Security Fundamentals

Security securityhardeningfirewallincident-responselinuxnftablescontainersauditd

Comprehensive hands-on Linux security training covering the full attack surface: user model hardening, filesystem permissions, capabilities, kernel hardening, firewalls with nftables, intrusion detection with auditd, log management, rootkit detection, container security, and live incident response.

Upcoming sessions

No upcoming sessions are scheduled yet.

FOUNDATIONSLinux Security Mindset &Threat Modeling3IDENTITY & ACCESSUser & Group Model4IDENTITY & ACCESSAuthentication Hardening4FILESYSTEM SECURITYFilesystem Permissions &ACLs4FILESYSTEM SECURITYSUID/SGID, Capabilities& Encryption4KERNEL & SOFTWAREKernel Hardening &Supply Chain Security4NETWORK SECURITYNetwork Security &Firewalls5AUDITING & DETECTIONIntrusion Detection withauditd4AUDITING & DETECTIONLog Management &fail2ban4AUDITING & DETECTIONRootkit Detection & FileIntegrity4CONTAINER SECURITYContainer Security4INCIDENT RESPONSEIncident Response &Forensics4AUTOMATIONSecurity Automation &Compliance4LECTURELECTURELECTURELECTURELECTURELECTURELECTURELECTURELECTURELECTURELECTURELECTURELECTUREDefense in Depth & LeastPrivilegeSTRIDE Threat Modeling ona Linux HostAttack Surface Mapping LabLinux Identity Model(UID/EUID, shadow,…Password Policy:login.defs, chage,…sudo Hardening & GTFOBinssudoers & Service AccountLabPAM Architecture &pam_faillockSSH Hardening:sshd_config, key types,…SSH Hardening LabQ&ATraditional Permissions,umask, dangerous patternsPOSIX ACLs withsetfacl/getfaclchattr, lsattr andImmutable FilesACL & Permission HardeningLabsetuid/setgid Risks andFinding SUID BinariesLinux Capabilities: Theory& PracticeLUKS Disk Encryption &eCryptfsCapabilities & EncryptionLabsysctl Hardening (ASLR,ptrace, TCP hardening)AppArmor / SELinux QuickOverviewPackage Integrity: GPG,debsums/rpm -Va, AIDEDay 1 Review & Q&ANetwork Attack Surface &Insecure Protocol AuditTCP/IP Stack Hardeningwith sysctlnftables: Tables, Chains,Rules, Setsnftables Firewall Lab (webserver + management SSH)Q&Aauditd Architecture & RuleWritingCIS Benchmark Audit RulesQuerying Logs: ausearch &aureportauditd Lab: Deploy Rules &Hunt EventsLinux Logging Architecture& Critical Log FilesRemote Log Forwarding &Tamper Preventionfail2ban: Jails, Filters,Actionsfail2ban Lab: Custom Jailfor Web ApplicationRootkit Taxonomy:User-space to Firmwarerkhunter & chkrootkitDetecting Hidden Processes& Kernel ModulesRootkit Detection LabLinux Primitives:Namespaces & cgroupsDocker Security: Mistakes& Hardeningsystemd Service Hardening(PrivateTmp,…Container Hardening LabIR Methodology & TriageOrderDetecting Persistence:Cron, systemd, SSH Keys,…Memory Acquisition & DiskForensics OverviewIncident ResponseSimulation LabLynis & OpenSCAP:Automated Compliance…Wazuh SIEM/XDR OvervieweBPF Security: Falco &TetragonCourse Summary, HardeningChecklist & Q&A
100%

Upcoming sessions

No upcoming sessions are scheduled yet.

Get in touch

Request more information

Leave your details and our team will get back to you with everything you need to know about this course.