LSMS

Linux 安全与监控脚本 这是一系列安全与监控脚本，可用于监控您的 Linux 安装中的安全相关事件，或用于调查。每个脚本独立运行，且不依赖其他脚本。这些脚本可以配置为直接打印结果、通过邮件发送给您，或使用 AlertR 作为通知渠道。 仓库结构 脚本位于 scripts/ 目录下。每个脚本的文件头部都包含一段简短摘要，描述其功能、当检测结果不明确时的解释方式以及已知问题。如果脚本有需要安装的依赖项，也会一并列出，同时会注明该脚本的灵感来源（如果有）。 每个脚本在 scripts/config/...

Intro to forensics in the cloud: A container was compromised. What’s next?

Learn what tools and data sources you need to use in cloud forensics investigation and how they come into practice in a real-life example...

What's New in Threat Intelligence: 2021 Year in Review

This post was originally published on the IntSights blog. Last year marked a huge milestone with the acquisition of IntSights by Rapid7. The IntSights team is very excited to join a company committed to simplifying and improving security outcomes for its customers. Rapid7's focus is a great...