1.trimstray / the-practical-linux-hardening-guide
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
+124 stars
from 10,782 · score 4.83
Ranked by Attention Score: stars gained over the last 90 complete days
4 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
AVML - Acquire Volatile Memory for Linux
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.