Linux Domain Playbook — Index
Linux Domain Playbook — Index
BLUF. Applied procedures for understanding a Linux host and collecting defensible evidence. General OS architecture remains in Platform Internals; offensive Linux tradecraft remains in OW64 Linux.
Assessment path
| # | Guide | Purpose |
|---|---|---|
| 1 | Linux internal device scan | Passive-first interface, route, neighbor, container, tunnel, listener, and reachability inventory |
| 2 | Linux log system | /var/log, journald, authentication, auditd, rotation, tamper resistance, and secure forwarding |
Classification boundary
- Here: authorized discovery, logging, hardening, evidence collection, and repeatable assessment procedure.
- Platform Internals: memory models, architecture, kernel construction, and cross-platform mechanics.
- RTO: post-exploitation, pivoting, evasion, and adversary-emulation workflows.