#tripwire

2024-05-22

Как обеспечить безопасность сайта на WordPress: инструменты для аудита и мониторинга

WordPress — самая популярная система управления контентом, поэтому чаще других подвергается атакам. В этой статье разберем инструменты, которые помогут проверить безопасность и защитить сайт на WordPress. В статье опишу: ▪️ Инструменты для проверки изменений в файловой системе Linux ▪️ Wazuh и Lynis — инструменты для мониторинга безопасности ▪️ Сервисы для проверки на вредоносное ПО ▪️ WPScan — проверяем сайт на уязвимости ▪️ Плагин Wordfence — для защиты WordPress ▪️ Регулярное обновление системы ▪️ Как автоматически обновлять пакеты в ispmanager ▪️ Кратко — как защитить сайт на WordPress Читать

habr.com/ru/companies/ispmanag

#информационная_безопасность #мониторинг_безопасности #информационные_технологии #ispmanager #isp #aide #tripwire #wazuh #lynis #wpscan

Christian Pietsch 🍑christian@suma-ev.social
2024-02-26

@Tronde Vor vielen Jahren habe ich den #AIDE-Vorgänger #Tripwire ausprobiert. Da war ich noch kein echter SysAdmin (& ich habe immer noch keine Zertifizierungen).

Damals war mir Tripwire zu umständlich. Statt dessen habe ich chkrootkit und rkhunter verwendet. Aber die sind arg in die Jahre gekommen und decken eh nicht alles ab, was ein IDS können soll.

In der Praxis informieren sie mich ähnlich wie etckeeper darüber, was andere Admins auf dem Server geändert haben. Werde mir AIDE mal ansehen.

2024-01-28

Last night I had a dream that I couldn't find my Tripwire log in my email, but then I realized I was dreaming and I could look it up later. I was also waking up when I was realizing this and the thought continued directly into being awake.

#dreams #dreaming #dream #Tripwire #selfhosting

2024-01-10

Just got #tripwire set up to email me, too. What's nice is you can check your #cron files by running them as a shell script.

#selfhosting #selfhosted #exim4 #swaks (using both for this)

2023-11-04

I'm trying to harden a #server I'll install #PeerTube onto, but I seem to have locked myself out of #ssh after a reboot (permission denied on the keys). Wonder if #Tripwire has something to do with it, or maybe it was me editing the wrong ssh config file thinking it was the right one. At least it's only been 3 hours I spent on it so I can try again and write things down. I don't like how #Lynis is named, it always confuses me.

2023-11-03

Yesterday was also the 32nd anniversary of the first public release of Tripwire. Gene Kim labored mightily at realizing my design, and answering my riddles three to get the code out. 😉

I still believe that integrity monitoring is underutilized.

#tripwire #cybersecurity #integrity #history

2023-10-08

Look - I can't focus on anything in normal life. Why do it here? Switching to Killing Floor 2.

Let the bodies hit the floor.

twitch.tv/exiledking
#KillingFloor2 #Tripwire #gaming #streamer #videogames #pcgames #streaming #twitch #KF2

2023-07-19

I'm looking for #OSSec guidance, I remember when #tripwire was suggested for detecting #rootkits, but there's so many options, with #Zeek and #Maltrail. #HIDS #IntrusionDetection

I thought OSSEC with the GUI looked nice, especially if there was a central monitoring server that agents could report to. Zeek looks more like that but looks like it may have to sit at the router, which is annoying, and doesn't detect rootkits at all. My end goal is preventing SIP phone fraud.

linuxsecurity.expert/tools/sam

J. R. DePriest :verified_trans: :donor: :Moopsy: :EA DATA. SF:jrdepriest@infosec.exchange
2023-03-10

Putting out a request again for any #Tripwire SME who would be willing to chat.
I know how Tripwire works. I understand Nodes, Rules, and Tasks. I think I understand Policies and Actions.
The building blocks are all there to build a robust #FIM and #Compliance monitoring and reporting process.
But you have to build it from scratch and there is scant documentation on the best way to start.
I'd love to talk to someone who has already built one up to make sure I don't spend time going down the wrong road.

The only components we are using are #TripwireEnterprise and #Axon agents.

2022-12-08

New Ransom Payment Schemes Target Executives, Telemedicine - Ransomware groups are constantly devising new methods for infecting victims and co... krebsonsecurity.com/2022/12/ne #venusransomware #thecomingstorm #clopransomware #holdsecurity #webfraud2.0 #fabianwosar #ransomware #alexholden #emsisoft #tripwire #ta505 #cl0p

2022-12-08

My thanks to all involved with ACSAC.

A special nod to Gene Kim on this.

My entry for Tripwire won the first ACSAC Impactful System Award today. Details and the writeup are here: acsac.org/2022/program/artifac.

If you work in cybersecurity and aren't familiar with the original Tripwire, you might want to read it.

#Cybersecurity #Tripwire #ACSAC #Integrity #IDS

Jason Pettus :blobrainbow:jasonpettus@mastodon.cloud
2022-07-23

Read my ★★★★★ review of #LeeChild's 1999 #Tripwire, book 3 of my completist run of all the #JackReacher books. I'm particularly happy with this one; if you read my reviews only occasionally, make this one of the occasions. goodreads.com/review/show/4866

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst