Ashro Linux Emergency Response Script
Ashro Linux is a versatile emergency response script designed for Linux systems, suitable for various situations. It is particularly useful for system administrators and security professionals who need to quickly assess and respond to potential security incidents.
Key Features:
- Root Privileges Required: Must be run with root permissions to access all system information.
- Comprehensive System Checks: Collects IP address information, checks logged-in users, and examines user permissions.
- Threat Intelligence: Generates MD5 hashes of command configuration files for threat intelligence queries.
- Log Analysis: Packages log files for easy analysis and provides detailed execution logs.
- Process Monitoring: Identifies high CPU and memory usage processes, hidden processes, and potential backdoors.
- Scheduled Task Analysis: Reviews system and user-defined scheduled tasks for anomalies.
Benefits:
- Quick Response: Enables rapid assessment of system security and potential threats.
- User-Friendly Logs: Provides friendly logs for easy analysis of the script's execution.
- Customizable: Users can modify the script to suit their specific needs and environments.
Highlights:
- Compatible with Ubuntu, CentOS 7, and Kali Linux.
- Generates reports on high-risk findings for further analysis.
- Community-driven with contributions and feedback encouraged.