Ssh

SSH Authorized Keys

SSH authorized_keys files list public keys allowed to access an account.

Metadata

  • id: ssh.authorized-keys
  • category: ssh
  • sensitivity: medium
  • artifact types: configuration
  • tags: ssh, authentication

Path Matchers

PathKindPlatforms
%USERPROFILE%\.ssh\authorized_keysfilewindows
$HOME/.ssh/authorized_keysfilelinux, macos

Impact

  • discovery
  • remote_access

References

On this page