auditd Archives - ITFROMZERO - Share tobe shared!

Installing and Configuring Linux Auditd on CentOS Stream 9: Comprehensive Security Event Monitoring

By IT From Zero October 18, 2026

A hands-on guide to deploying Linux Auditd on CentOS Stream 9: configuring kernel rules, tracking original users with auid, and analyzing incident logs via ausearch and aureport.

Security

Ransomware Defense on Linux Servers: Proactive Protection, Early Detection, and Data Recovery

By IT From Zero June 17, 2026

A practical guide to Linux server ransomware defense using a defense-in-depth model: SSH hardening, abnormal encryption detection scripts, offline backups with BorgBackup, and an incident response plan for when things go wrong. Aimed at sysadmins and DevOps teams managing production servers.

Security

Auditd Configuration Guide: The “Black Box” for Tracking Every Change on Linux

By IT From Zero April 20, 2026

Hackers can wipe history but they can't hide from Auditd. A guide to configuring the Linux "black box" to trace file edits, command execution, and overall server security.