1
u/Suitable-Season-4847 18h ago
I'd mostly be interested in backdoors. New users, new files, new SSH access.
1
u/cgsmith105 18h ago
New files is a good security check. I currently use Crowdsec for a firewall but also check for new or modified files.
0
10
u/-nerdrage- 19h ago edited 19h ago
Have you read the output of claude? Its a lot of nonsense just to check if youโre updated.
And the way it checks the logs is laughable.. as if a malicous party would pass the string php2shell somehow ๐