MOCs
Notes
- Backup
vsftpd.conf
somewhere
- Make it immutable? Check this guide
- Wait until
chattr
is renamed /usr/bin/chattr
→ /usr/bin/___
- Backup
sshd.conf
somewhere
- Set idle SSH timeout? Modify
sshd_config
for ClientAliveInterval
and ClientAliveCountMax
- Verify SSH scoring users and edit
/etc/ssh/sshd_config
with AllowUsers
- Change Creds for Root
- Read over
/etc/passwd
| Disable users
- Check
/etc/skel
- Disable root SSH login and create our own privileged user (try to make three)
- Check the running services and disable/stop any suspicious
- Check open ports and disable/close any suspicious ports