linux-sec-dev-101

notes of protectiing linux systems

• ossec https://www.ossec.net/about/
• osquery
• wazuh
• capsul8

osquery data

• osquery-under-the-hood
• 大部分监控实现位于 https://github.com/osquery/osquery/tree/29f4694df2/osquery/tables/system
• https://engineering.fb.com/security/how-rocksdb-is-used-in-osquery/t

wazuh data

• wazuh 原理分析
• capabilities