Part II — Managing Systems

Chapter 5

System Monitoring, Logging, and Hardening

Domain 2 Lab 3

📖 Key Topics Covered

  • ▸ System Monitoring Fundamentals
  • ▸ What to Monitor
  • ▸ WHY IT MATTERS
  • ▸ Detect data exfiltration, C2
  • ▸ File System
  • ▸ Software installation, service
  • ▸ Linux Monitoring Commands
  • ▸ Windows Monitoring Tools
  • ▸ Get-Counter '\Processor(_Total)\% Processor Time'
  • ▸ Get-Counter '\Memory\Available MBytes'
  • ▸ Log Management
  • ▸ Linux Log Files
  • ▸ LOG FILE
  • ▸ KEY CONTENT
  • ▸ General system

🔑 Key Terms

Benchmarks CIS (Center for Internet Security) Correlation Efficiency Log Management Logs Retention SIEM (Security Information and Event Management)

See the full definitions in the Glossary and test yourself with Flashcards.

Assessment Tips

💡 Assessment Tip

CIS Benchmarks are the gold standard for system hardening. Know that they exist, what they cover, and that they provide specific configuration recommendations (not just general advice). Many compliance frameworks reference CIS Benchmarks. 53 Linux Ha

🧪 Hands-On Lab

This chapter includes Lab 3 in Appendix E. View lab setup guide →

← Chapter 4 All Chapters Chapter 6 →