intrusion-detection Archives - ITFROMZERO

Monitoring tutorial - IT technology blog

How to Install and Configure Wazuh SIEM on Linux Server: Security Monitoring and Vulnerability Detection

By IT From Zero October 29, 2026

A hands-on guide to self-hosting Wazuh SIEM on Linux Server. Enable real-time File Integrity Monitoring (FIM), automate CVE vulnerability scanning, and block brute-force IPs with Active Response.

Security

How to Use Canarytokens for Early Intrusion Detection: Setting Traps in Files, URLs, and Emails

By IT From Zero June 16, 2026

Canarytokens is a technique for planting information traps inside files, URLs, and emails to detect hackers the moment they access sensitive data — receiving instant alerts with IP address and timestamp. A step-by-step practical guide: creating tokens and embedding them in fake credential files, .env files, Word documents, and DNS config on Linux servers.

Security

System File Integrity Monitoring with AIDE on Linux: Early Intrusion Detection and Data Tampering Prevention

By IT From Zero March 22, 2026

Ensuring Linux server security is a top priority, and File Integrity Monitoring (FIM) with AIDE is an effective solution. This article shares practical experience deploying AIDE for early intrusion detection and prevention of system data tampering.

Security

Detecting and Responding to a Hacked Server: A Practical Step-by-Step Guide

By IT From Zero February 28, 2026

A step-by-step guide to detecting and responding to a compromised Linux server: from manual command-line inspection and rootkit scanning with rkhunter/chkrootkit, to server isolation and setting up Fail2ban for long-term defense. Includes real commands and hands-on experience.