occupation
Information Security Analysts
description
Verify that packets with un-routable source addresses are logged for investigation
updated
Skills in this repository
CyberStrikeus/CyberStrike - Page 146
SkillsMP has collected 7,442 skills from CyberStrikeus/CyberStrike. Open a skill to review its source and details.
CyberStrikeus/CyberStrikeShowing 40 of 7,442 collected skills.
skill
occupation
description
updated
occupation
Information Security Analysts
description
Verify that TCP SYN Cookies are enabled to protect against SYN flood attacks
updated
occupation
Information Security Analysts
description
Verify that IPv6 is disabled if not required to reduce the attack surface
updated
occupation
Information Security Analysts
description
Verify that TCP Wrappers is installed for host-based access control
updated
occupation
Information Security Analysts
description
Verify that /etc/hosts.allow is configured to permit authorized network access
updated
occupation
Information Security Analysts
description
Verify that /etc/hosts.deny is configured to deny all unauthorized network access
updated
occupation
Information Security Analysts
description
Verify that iptables is installed for firewall management and configuration
updated
occupation
Information Security Analysts
description
Verify that default deny firewall policy is configured for INPUT, OUTPUT, and FORWARD chains
updated
occupation
Information Security Analysts
description
Verify that loopback interface accepts traffic and other interfaces deny loopback network traffic
updated
occupation
Information Security Analysts
description
Verify that wireless interfaces are disabled to reduce the attack surface
updated
occupation
Information Security Analysts
description
Enable the auditd daemon to record system events for security monitoring
updated
occupation
Information Security Analysts
description
Enable the rsyslog service to ensure system logging is active
updated
occupation
Information Security Analysts
description
Configure rsyslog to capture appropriate logging for all facilities
updated
occupation
Network & Computer Systems Administrators
description
Enable the syslog-ng service to ensure system logging is active
updated
occupation
Network & Computer Systems Administrators
description
Configure syslog-ng to capture appropriate logging for all facilities
updated
occupation
Network & Computer Systems Administrators
description
Configure logrotate to ensure logs are rotated regularly to prevent disk exhaustion
updated
occupation
Network & Computer Systems Administrators
description
Verify the cron daemon is enabled to execute scheduled batch jobs on the system
updated
occupation
Network & Computer Systems Administrators
description
Verify SSH access is limited using AllowUsers, AllowGroups, DenyUsers, or DenyGroups directives
updated
occupation
Network & Computer Systems Administrators
description
Verify SSH is configured to use Protocol version 2 only
updated
occupation
Network & Computer Systems Administrators
description
Verify SSH X11 forwarding is disabled to prevent remote graphic connection tunneling
updated
occupation
Network & Computer Systems Administrators
description
Verify SSH IgnoreRhosts is set to yes to prevent .rhosts-based authentication
updated
occupation
Network & Computer Systems Administrators
description
Verify SSH PermitRootLogin is set to no to prevent direct root login over SSH
updated
occupation
Network & Computer Systems Administrators
description
Verify PAM is configured to remember at least 5 previous passwords to prevent reuse
updated
occupation
Information Security Analysts
description
Verify system accounts have non-login shells and are locked to prevent interactive access
updated
occupation
Information Security Analysts
description
Find and remediate world writable files across all local filesystems
updated
occupation
Information Security Analysts
description
Identify and review all SUID executables to ensure they are legitimate
updated
occupation
Information Security Analysts
description
Identify and review all SGID executables to ensure they are legitimate
updated
occupation
Information Security Analysts
description
Verify all accounts in /etc/shadow have a password or are locked
updated
occupation
Information Security Analysts
description
Verify no users have .forward files in their home directories
updated
occupation
Information Security Analysts
description
Verify no users have .netrc files in their home directories
updated
occupation
Information Security Analysts
description
Verify no users have .rhosts files in their home directories
updated
occupation
Information Security Analysts
description
Verify no duplicate User IDs exist in /etc/passwd
updated
occupation
Information Security Analysts
description
Verify no duplicate Group IDs exist in /etc/group
updated
occupation
Information Security Analysts
description
Verify no duplicate user names exist in /etc/passwd
updated
occupation
Information Security Analysts
description
Verify the shadow group has no users assigned to it
updated
occupation
Information Security Analysts
description
Verify that only the root account has UID 0
updated
occupation
Information Security Analysts
description
Verify root PATH does not contain writable or non-root-owned directories
updated
occupation
Information Security Analysts
description
Ensure mounting of cramfs filesystems is disabled
updated
occupation
Information Security Analysts
description
Ensure mounting of freevxfs filesystems is disabled
updated
occupation
Information Security Analysts
description
Ensure mounting of jffs2 filesystems is disabled
updated
Showing 40 of 7,442 collected skills.