Debian security/vulnerability checks & audits

#-------------------------------
#Install RKhunter
sudo apt install rkhunter -y
#Before running RKhunter you will need to fill the file properties database:
sudo rkhunter --propupd
#Now set it u with a minor tweak to prevent the "usual" errors/warnings
sudo tee /etc/rkhunter.conf.local << END
PKGMGR=DPKG
SCRIPTWHITELIST=/usr/bin/lwp-request
ALLOWHIDDENDIR=/etc/.java
END
#Run it
sudo rkhunter -c
#Check the summary results
sudo cat /var/log/rkhunter.log | grep -i "warn\|suspect\|possible\|rootkits\|infect"

#-------------------------------
#Install chkrootkit
sudo apt install chkrootkit -y
#Run it
sudo chkrootkit | grep -i INFECTED | grep -iv 'not'

#-------------------------------
#Install Lynis
# Add the 'https' method for APT:
sudo apt install -y apt-transport-https
#Add keys:
sudo wget -O - https://packages.cisofy.com/keys/cisofy-software-public.key | sudo apt-key add -
#Add the repo:
echo "deb https://packages.cisofy.com/community/lynis/deb/ stable main" | sudo tee /etc/apt/sources.list.d/cisofy-lynis.list
#update and then install Lynis.
sudo apt update -y && sudo apt upgrade -y
sudo apt install lynis -y
#Run it (minimal version)
sudo lynis audit system --quick
#Check the summary/results
sudo cat /var/log/lynis-report.dat | grep -i "warn\|suggest\|suspect\|possible\|rootkits\|infect"