Linux Agent password protection

A.Alharbi095930 — Sun, 16 Feb 2025 14:19:19 GMT

Hi,

i know that Linux Agent Tampering protection is not support yet , however what is the possible why to secure the agent?

Re: Linux Agent password protection

aspatil — Mon, 17 Feb 2025 08:49:31 GMT

Hello @A.Alharbi095930
Thanks for reaching out on LiveCommunity!

As you know, the root user has full control over Linux, so there is currently no ETA for Tamper Protection on Linux. You may reach out to your Account Manager for more information.

However, if you have Pro per GB, you can use the Collector to collect logs from the /var/log/traps directory. Additionally, for more extensive or backup log collection, you can configure rsyslog or syslog-ng to forward logs from that directory to another system and collect those events on the remote host. While none of these methods are completely tamper-resistant, any attempts to shut down one of these services will be detected and reported by the others, providing at least some level of visibility into such activity.

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.

topic Linux Agent password protection in Cortex XDR Discussions

Linux Agent password protection

Re: Linux Agent password protection