What open-source tools or built-in commands should I use right now to spot lateral movement indicators on Linux servers before the audit team arrives tomorrow morning
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
What open-source tools or built-in commands should I use right now to spot lateral movement indicators on Linux servers before the audit team arrives tomorrow morning
1 real search · 1 real-search pass
Linux lateral movement detection defensive monitoring osquery Wazuh auditd official documentation SSH logsGoogle ↗
OBSERVED
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 1 queries…
Searches and sources
ChatGPT1 real searches · gpt-6
Linux lateral movement detection defensive monitoring osquery Wazuh auditd official documentation SSH logs Google ↗
- osquery/docs/wiki/deployment/process-auditing.md at master · osquery/osquery · github.com
- Wazuh · wazuh.com
- Log data analysis · documentation.wazuh.com
- Configuration · documentation.wazuh.com
- Log data analysis · documentation.wazuh.com
- Exploitation of Remote Services – multi-platform lateral movement detection, Detection Strategy DET0118 · attack.mitre.org
- Detecting SSH Lateral Movement on Linux | Skuggaheimar · intel.mjolnirsecurity.com
- MITRE ATT&CK – SSH Remote Services · attack.mitre.org
- osquery · osquery.io
- Wazuh documentation · documentation.wazuh.com