Securing the SUSE IT Infrastructure using Velociraptor
Channel: SUSE Labs
Date: 2022-10-24

by Jeff Mahoney and Nikolay Borisov at SUSE Labs Conference 2022

Thanks to our conference sponsors, ARM and HPE, and our hosting sponsor and BigBlueButton provider, Blindside Networks.

Modern IT infrastructure includes vigilant monitoring of sensitive resources like servers. There are many products on the market that perform this monitoring but the most popular ones are proprietary software and, as an open source company, SUSE would prefer to use open source tools when available. This talk will cover the work the Linux Security Sensor team has done to extend the Velociraptor Digital Forensics and Incident Response tool to address the needs of SUSE's IT security team and show some real-world examples of how it can be deployed.