Methods on detecting hackers?
Just wondering, what do you all do to detect hackers?
Personally I do three things, though I should probably do more. First I review logs to see if anyone is doing anything they should not. Second I ban IPs from countries that are more likely to attack my server. Lastly I use fail2ban to detect people trying to get in while I am not looking.
Looking forward to seeing what you all do.
Detection is incredibly hard, prevention is much easier.
Two factor authentication - Mandatory
https://haveibeenpwned.com/API/v3 - Preventing users picking bad passwords.
Patch and update everything, everywhere.