Operating System: Part II SSHD ed25519 keys with passwords protected limit access brute force noise: firewall, fail2ban Time: not transactional database, but it matters ntp daemon, not @daily rdate chronyd (for Fedora) UTC makes correlating events easier