IDS & Security Audit

Initialise the One-Click IDS baseline, run scans and review audit, ban-list and drop-history workflows.

The security menu combines firewall change control with host audit and IDS workflows.

Initialise the Baseline

one-click engine 'audit scan --init'

When no baseline exists, the launcher warns that the IDS scanner has not yet been initialised.

Run and Inspect

one-click engine audit
one-click engine 'audit scan'
one-click engine 'audit banlist'
one-click engine 'audit history'

Operator-directed Block

one-click engine 'audit ssh'
one-click engine 'audit drop <ID>'

Treat automated findings as investigation input. Review context before applying a permanent network block, especially on shared or translated infrastructure.