Tag: MITRE ATT&CK
-
Linux Security Monitoring with OpenSCAP and Splunk
A few months ago I started building out a home lab focused on detection engineering. This project covers Linux SIEM monitoring with Splunk and OpenSCAP on a hardened Ubuntu 24.04 VM with detections mapped to MITRE ATT&CK. The starting point is OpenSCAP, an open source tool that evaluates a system against a security benchmark and…