Intrusion Detection skills

Configuring Host-Based Intrusion Detection

mukul975

Set up HIDS for robust endpoint security monitoring.

Detecting Attacks on SCADA Systems

mukul975

Enhance security for industrial control systems.

Configuring Snort IDS

mukul975

Set up Snort 3 for effective intrusion detection.

Analyzing Linux Audit Logs

mukul975

Detect intrusion attempts and unauthorized access on Linux.

Web Server Log Analysis

mukul975

Detect intrusions by analyzing web server access logs.

File Integrity Monitoring with AIDE

mukul975

Automate file integrity checks on Linux systems.

Deploys DNS, HTTP, and AWS API key canary tokens across network infrastructure to detect unauthorized access and lateral movement. Integrates with webhook alerting (Slack, Teams, email, generic HTTP) for real-time intrusion notifications. Provides automated token generation, placement strategies, and monitoring for enterprise network environments. Use when building deception-based network intrusion detection with Canarytokens.org and Thinkst Canary platforms.