Lesson 9 of 13 · Control and detection
Logging with journald and auditd
Objective
After an incident, be able to answer who did what, when and from where: logs that survive a reboot, a precise record of sensitive actions with auditd, and a copy outside the server.
This lesson is part of the full course
Unlock Linux Server Hardening to read every lesson, do the exercises, access the simulations and earn your certificate.
Already enrolled? Log in.