linux-security Archives

Deploy CrowdSec on Linux: Building a Distributed IPS to Block Brute Force and Web Attacks

October 19, 2026

Tired of isolated log parsers missing distributed brute-force sweeps? Here is how to deploy CrowdSec on Linux to shut down coordinated SSH and web attacks using collaborative, crowd-sourced threat intelligence.

HomeLab

Deploy Wazuh SIEM & XDR on Docker: Complete HomeLab Security Monitoring

October 18, 2026

Deploy a complete Wazuh SIEM & XDR stack in your homelab using Docker Compose. Step-by-step instructions cover Linux kernel tuning, mTLS certificate generation, container orchestration, and client agent enrollment.

Security

Automated Malware Analysis with CAPEv2 Sandbox on Linux: Build an Isolated Detonation Chamber to Extract IOCs

October 17, 2026

When fresh malware bypasses static antivirus filters during an active incident, automated dynamic analysis is your fastest triage route. Learn how to configure CAPEv2 on Ubuntu and KVM to dump memory and extract actionable C2 indicators in minutes.

Security

Deploy Velociraptor on Linux: Real-Time Endpoint DFIR and Threat Hunting Guide

October 17, 2026

Deploy Velociraptor on Linux to build a fast, query-driven endpoint DFIR and threat hunting system. Learn how to install the server, deploy client agents, write custom VQL artifacts, and secure your forensic pipeline.

Security

SSH Two-Factor Authentication with Google Authenticator PAM on Linux

October 12, 2026

Relying strictly on SSH keys leaves servers exposed if developer laptops or credentials are compromised. This guide explains how to integrate Google Authenticator PAM with OpenSSH to require both a private key and a dynamic TOTP code on Linux.

Linux

Master SELinux on RHEL and Rocky Linux: Managing Contexts, Booleans, and Fixing Access Denials with audit2allow

October 7, 2026

Troubleshoot and fix 2 AM SELinux permission errors on RHEL and Rocky Linux without disabling security. Learn how to diagnose AVC denials, relabel contexts, toggle booleans, and build custom policies with audit2allow.

Security

Deploying Wazuh SIEM and XDR on Linux: Centralized Security and Active Response

October 5, 2026

Learn how to deploy a centralized Wazuh SIEM and XDR platform on Linux. Follow this practical guide to install the central manager, enroll agents, configure File Integrity Monitoring, and automate threat mitigation with Active Response.

Security

Zero Trust on Linux: A Practical Guide to Deploying HashiCorp Boundary

September 10, 2026

Replace outdated VPNs with HashiCorp Boundary. This guide provides a hands-on approach to deploying controllers, workers, and Zero Trust access on Linux.

Security

Defeating Log Tampering with Journald Forward Sealing (FSS)

September 10, 2026

Attackers often wipe Linux logs to hide their tracks. This guide shows you how to use Journald Forward Sealing (FSS) to cryptographically sign your logs, ensuring their integrity even if your server is compromised.

Security

Modern Linux Security: Hardening the Boot Process with Unified Kernel Images (UKI)

September 7, 2026

Secure your Linux system by implementing Unified Kernel Images (UKI). This guide shows you how to bundle the kernel and initrd into a single signed EFI binary for robust Secure Boot protection.