Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Triggers to Detect Suspicious Activities

I still need to finish my strategy and do a
Warning
Note

This article can be enhanced with a strategy and write up on the following triggers,

  • Alert me when a sudo capable account logs in.
  • Alert me when serveradmin logs in.
  • Alert me when accounts fail sudo attempts.