Red Hat Summit Red Hat SummitSuporteConsoleDesenvolvedoresComeçar um testeContato

Este conteúdo não está disponível no idioma selecionado.

Chapter 1. Learn about the Red Hat Lightspeed malware detection service

The Red Hat Lightspeed malware detection service is a monitoring and assessment tool that scans Red Hat Enterprise Linux systems for the presence of malware. The malware detection service incorporates YARA pattern-matching software and malware detection signatures. Signatures are provided in partnership with IBM X-Force threat intelligence and CrowdStrike (requires a CrowdStrike Falcon Adversary Intelligence Premium license), working closely with the Red Hat threat intelligence team.

Depending on your user access permissions as an administrator or viewer in the Red Hat Hybrid Cloud Console, you can perform the following actions within the malware detection service:

  • Review the list of IBM and CrowdStrike signatures that the service uses to scan your Red Hat Enterprise Linux systems.
  • Review the overall results for all RHEL systems with malware detection enabled in the insights-client.
  • Review the scan results for individual RHEL systems.
  • Identify RHEL systems showing evidence of the presence of malware.

The malware detection service gives you valuable information to prepare a response against threats to RHEL systems within your organization.

Important

The malware detection service does not provide recommendations to resolve or remediate malware incidents.

1.1. Malware signature sources
Copiar o link

YARA signature detection is the cornerstone of the Red Hat Lightspeed malware detection service. A YARA signature describes a malware type as a pattern: a set of strings and a boolean expression that form a rule. When a scan on a Red Hat Enterprise Linux system matches that rule, YARA records a hit on that system.

The malware detection service includes predefined signatures from the IBM X-Force Threat Intelligence team and evaluates your systems against hundreds of those default rules to help detect malware on Red Hat Enterprise Linux systems. The service also supports the manual addition of thousands of CrowdStrike signatures. Knowing whether a rule comes from IBM X-Force or from CrowdStrike helps you interpret default coverage and any optional rules you add.

Red Hat logoGithubredditYoutubeTwitter

Aprender

Experimente, compre e venda

Comunidades

Sobre a Red Hat

Fornecemos soluções robustas que facilitam o trabalho das empresas em plataformas e ambientes, desde o data center principal até a borda da rede.

Tornando o open source mais inclusivo

A Red Hat está comprometida em substituir a linguagem problemática em nosso código, documentação e propriedades da web. Para mais detalhes veja o Blog da Red Hat.

Sobre a documentação da Red Hat

Ajudamos os usuários da Red Hat a inovar e atingir seus objetivos com nossos produtos e serviços com conteúdo em que podem confiar. Explore nossas atualizações recentes.

Legal Notice

Theme

© 2026 Red HatVoltar ao topo