Security & Monitoring Tools

A focused baseline for hardening, auditing, and visibility on a developer workstation.

Intrusion detection: Fail2ban

What it does: parses auth logs and blocks repeated offenders.

Useful checks:

sudo systemctl start fail2ban
sudo fail2ban-client status

What it does: runs a comprehensive host security audit and suggests remediations.

Install & run:

sudo apt install lynis -y
sudo lynis audit system

Failed logins (one‑off):

sudo cat /var/log/auth.log | grep "Failed"

Live auth log:

sudo tail -f /var/log/auth.log

Processes:

htop

Network listeners:

sudo apt install net-tools
sudo netstat -tulpn

Create separate profiles for work, freelancing, and banking to isolate sessions and cookies.

Firefox Profile Manager:

firefox -P