Hi everyone,
my name is Owen Dubiel, Security Practitioner, and
welcome to this Blue Team Tools course,
OS Analysis with Nagios, featuring the open source analysis and
monitoring tool developed and maintained by Ethan Galstad.
By taking this course,
you'll be able to effectively detect the beginning stages of some of the
most common attack types by identifying activity like PowerShell execution,
or monitoring the status of constant services, like your Windows Firewall.
An attacker with local privileges on a Windows host will most likely need
to interact with either one or both of these services in order to complete
their attack.
Once you complete this course,
the possibilities are endless for different types of services you can
monitor for, and you will be empowered to build out a defensive
strategy that is both effective and efficient.
Nagios was originally labeled as NetSaint, but due to trademark concerns,
it was later changed to Nagios, which actually stands for "Nagios Ain't
Gonna Insist On Sainthood," which is a play at the long‑term
implications for using the word saint in the name.
I hope you'll join me on this journey to learn defensive
monitoring techniques in this OS Analysis with Nagios course
at Pluralsight. (Music playing)