What tool or scripts do you use to audit a Linux box?

Posted by Sharjeel Sayed on Server Fault See other posts from Server Fault or by Sharjeel Sayed
Published on 2008-09-29T06:48:21Z Indexed on 2010/04/22 13:24 UTC
Read the original article Hit count: 541

Filed under:
|
|
|
|

I use the following tools for my auditing needs

A) System Auditing and Hardening (One time)

1) Linux Security Auditing Tool (Security centric,Text based output )

2) Dmidecode ( Retrieves info from BIOS )

3) Systeminfo ( Generates a nice html report)

4) Syssumm (Inactive since Oct 2000)

5) Rootkit Hunter (Does a basic config check in addition to rootkit checks)

6) CIS benchmarks

7) Bastille ( Interactive hardening and a security scoring tool)

B) Automatic Auditing (as a cron job or a service)

1) Logwatch

2) Psad

C) Remote Auditing

1) Nmap (Port scanning)

2) Nessus ( Remote Vulnerability check)

D) Wikipedia

1) System profiler

Any other tools/scripts which you can recommend?

© Server Fault or respective owner

Related posts about linux

Related posts about sysadmin