The tools mentioned, such as LinEnum and linux-exploit-suggester, are primarily designed for privilege escalation during penetration testing rather than for automated intrusion detection.
For automated intrusion detection, you would typically use tools specifically designed for that purpose, such as:
- Intrusion Detection Systems (IDS) like Snort or Suricata.
- Security Information and Event Management (SIEM) systems like Splunk or ELK Stack.
These tools analyze network traffic and system logs to identify suspicious activities and potential intrusions.
