Security Automation with Ansible 2

Scheduled scans for file integrity checks, host-level monitoring using Ansible for various compliance initiatives

One of the many advantages of being able to execute commands on the host using Ansible is the ability to get internal system information, such as:

• File hashes
• Network connections
• List of running processes

It can act as a lightweight Host-Based Intrusion Detection System (HIDS). While this may not eliminate the case for a purpose-built HIDS in many cases, we can execute the same kind of security tasks using a tool such as Facebook's osquery along with Ansible.