Linux strengths: open source and auditable, granular permissions with strong CLI/automation, lightweight, dominant on servers, fast patching, and a smaller desktop-malware target. Weaknesses: fragmentation across distros, steeper learning curve, less commercial desktop/app support, and configuration that assumes more expertise.
Windows strengths: ubiquitous on desktops, strong enterprise management (Active Directory, Group Policy), broad software/driver and vendor support, and a familiar GUI. Weaknesses: larger attack surface and malware target, closed source, licensing cost, and historically more privilege/registry-related exposure.
Windows: Internet adapter/
Linux: sudo nano /etc/resolv.conf add nameserver x.x.x.x
Cyber-enabled crime: traditional crime that is amplified by the use of computer tech
Cyber Crime: illegal action involving network or computer where it used to commit the crime
Protect CIA (Confidentiality, Integrity, Availability)
Financial loss (fraud, downtime, remediation, ransom), breach of customer data / IP / PII, operational disruption, reputational damage and lost customer trust, legal and regulatory penalties (e.g. GDPR/HIPAA fines), and — in critical-infrastructure or safety systems — potential physical harm.
Auditing: A system scan is performed using a tool called Lynis for auditing. Every category is scanned separately and the hardening index is provided to the auditor for further steps.
Hardening: After the audit is complete, the system is hardened depending on the level of security it further needs. It is an important process based on the decision of auditor.
Compliance: The system needs to be checked almost every day for better results and also lesser threats from security point of view.
Techniques: exploiting kernel/service vulnerabilities, abusing misconfigurations (writable SUID binaries, weak sudo rules, world-writable files/services, unquoted service paths on Windows), stealing and reusing credentials or tokens, and DLL hijacking. Prevention: least privilege, timely patching, removing unnecessary SUID/admin rights, hardening service and file permissions, application whitelisting, and monitoring for anomalous privilege use.
RCE is the ability to run attacker-supplied code on a target, usually the highest-impact outcome. Attackers commonly turn it into an interactive shell: a bind shell opens a listening port on the victim for the attacker to connect to, while a reverse shell has the victim connect back out to the attacker’s listener (favored because outbound connections more often bypass firewalls/NAT).
A IaaS, or Infrastructure as a Service, is one of the cloud service that the providers provide the server, storage and networking, the customers will take care of the OS and everything above that
I do have experience setting up AWS ECS and manage it, therefore I know how to set them up and how it works.
AWS do have a service called CloudWatch that will handle the logs and information from different AWS EC2 and other service, where you can view and manage the logs.
If you want to see logs and console output for a single instance, it can be found in the Amazon EC2 console
You will be able to get system logs, console output
In IaaS, provider handles networking, virtual machines, storage. Client has the most flexibility but have to manage many things
In PaaS, provider handles what’s handled in IaaS and also OS, runtime and some of the software maintenance.
In SaaS, provider handles everything, client can use the product directly without handling or maintaining anything.