ssh-hardening-incident-response

What problem does it solve?

SSH access is frequently exposed to brute-force attempts and credential compromise; this Skill provides baseline SSH hardening and incident-response workflows to reduce risk and speed containment.

Core Features & Use Cases

• Baseline SSH hardening: disable password authentication, enforce key-based login, and restrict access to trusted users.
• Brute-force detection and containment: quick playbooks to identify offending IPs and isolate affected accounts.
• Audit-ready configuration and rollback: versioned sshd_config backups and validated changes for compliance.
• Use Case: rapidly lockdown SSH across a fleet of servers after a suspected credential exposure and rotate keys.

Quick Start

Apply the hardened SSH configuration to a remote host and verify the changes.