Module A.md

Module A

• Websites like techmint.com are really good resource to mostly OS like CentOS or RHEL

• User Creation

  • adduser <username> - add new user
  • passwd <username> - change/set password for the user

• A small intro to IDS and IPS

  • https://bit.ly/2N2HUNO

• https://www.tecmint.com/lock-user-accounts-after-failed-login-attempts-in-linux/

  • /etc/pam.d/system-auth
  • /etc/pam.d/password-auth
  • Ex: auth required pam_faillock.so preauth silent audit deny=3 unlock_time=600
  • https://www.golinuxhub.com/2018/08/how-to-lock-or-unlock-root-normal-user-pamtally2-pamfaillock-linux.html

• DNS servers

  • https://www.golinuxhub.com/2018/08/how-to-lock-or-unlock-root-normal-user-pamtally2-pamfaillock-linux.html
    • config file : /etc/named.conf
    • script file : /etc/init.d/named
  • Default port is 53
  • The main thing in this would me understanding all the keywords like TXT or CNAME etc
    • If we know that then configuring a DNS is easy

• For splunk, https://splunk.com is the best resource out there

  • configuring and setting up splunk is very painful
  • https://www.splunk.com/en_us/get-started.html
  • https://www.splunk.com/en_us/view/SP-CAAAG2R

• For CISCO routers, things like using EXEC password or adding new user

  • https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cfg/configuration/xe-3s/sec-usr-cfg-xe-3s-book/sec-cfg-sec-4cli.html

• A github gist explaining how to setup CA certs with OpenSSL

  • https://gist.github.com/Soarez/9688998

• A brief intro to Linux system hardening

  • https://linuxacademy.com/guide/19700-linux-security-and-server-hardening-part1/

• Configuring LDAP

  • https://www.tecmint.com/install-openldap-server-for-centralized-authentication/