SSH Events in Host Observations log relevant events related to SSH connections, such as:
User: Who connected.
Process path: What processes were started as a result of the SSH session.
Command: What commands the user executed during the SSH session.
Startup process is not an option. SSH Events focus on specific actions performed by users accessing the host via SSH, not on system startup processes.
D --> Alert/prevent processes by path
E --> The SSH events tab shows ssh commands run in interactive sessions, limited to 100 events per hour.
B --> Detect binaries created by a user without a package manager
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Redrum702
Highly Voted 6 months ago4nim4tronic
Most Recent 1 week, 4 days agoSpippolo
1 month, 1 week ago