如何判断Debian系统是否被Exploit
-
如何判断Debian系统是否被Exploit
判断 Debian 是否被 Exploit 的实用流程一 快速自检清单检查异常登录与权限变更查看关键日志:/var/log/auth.log、/var/log/syslog、/var/log/kern.log关注关键词:Failed password、Accepted、root、sudo、session opened/closed示例:sudo grep “Failed password” /
判断 Debian 是否被 Exploit 的实用流程一 快速自检清单检查异常登录与权限变更查看关键日志:/var/log/auth.log、/var/log/syslog、/var/log/kern.log关注关键词:Failed password、Accepted、root、sudo、session opened/closed示例:sudo grep “Failed password” /