How to Schedule Weekly Security Scan

Step 1: Create Scan Script

sudo nano /usr/local/bin/weekly-scan.sh

Add:

#!/bin/bash
LOG="/var/log/security-scan-$(date +%Y%m%d).log"
echo "=== Security Scan $(date) ===" >> $LOG
echo "--- Lynis ---" >> $LOG
lynis audit system --quick >> $LOG
echo "--- ClamAV ---" >> $LOG
clamscan -r /home --max-filesize=50M >> $LOG
echo "--- Open Ports ---" >> $LOG
ss -tulpn >> $LOG
mail -s "Weekly Security Scan $(date)" admin@example.com < $LOG

Step 2: Make Executable

sudo chmod +x /usr/local/bin/weekly-scan.sh

Step 3: Add to Cron

sudo crontab -e

Add:

0 3 * * 0 /usr/local/bin/weekly-scan.sh