Easy Linux Ops with osquery will first provide students with the information they need to quickly leverage osquery for Computer Network Defense (CND). Next we will show students some very simple Computer Network Exploitation (CNE) techniques being used right now by real-world hackers to hide within information systems. Lastly we will show students how to easily detect each of these techniques using osquery. Topics covered include: - osquery 101 for enhanced Computer Network Defense (CND) operations - Blending into a process list for stealthy Computer Network Exploitation (CNE) operations - Leveraging osquery to detect suspicious processes on endpoints - Obtaining root access via simple privilege escalation techniques - Exposing malicious on disk binaries through osquery This is a hands-on course designed for anyone who is interested in learning more about linux or osquery. All hands-on exercises will be demonstrated so each student may obtain a deep understanding of the content. An interactive lab environment will be prepared for students, enabling individuals to quickly join the fun by merely SSH-ing into the instructor’s lab infrastructure (e.g. via PuTTY for Windows users). A Virtual Machine image will be furnished via a downloadable link for students to continue learning even after the course is over. Bonus material will be provided for advance students to work through at their own pace.