Web Hosting & VPS Tips

Monitor system activity with auditd on Debian—install with apt install auditd add rules like -w /etc/passwd -p wa -k passwd_changes to /etc/audit/rules d/audit rules then restart with systemctl restart auditd Check logs with ausearch -k passwd_changes—expect file access events Tracks security changes for SSH or MySQL configs