October 31, 2026
Linux Networking Commands Cheat Sheet: 13 Tools Every SOC Analyst Needs (2026)
Every Linux incident investigation starts the same way: not with a fancy platform, but with a terminal and a handful of commands. 🐧
By Xpert4Cyber
Before logs are centralized and before an EDR console loads, you need answers fast. What is this host listening on? Who is it talking to? Is DNS telling the truth? 🔍
This guide walks through 13 Linux networking commands (ip, ifconfig, ping, traceroute, netstat, ss, wget, curl, scp, rsync, dig, nslookup, nmap) from a defender's point of view, with a five-minute triage workflow you can reuse on any server. 🛡️
Inside the guide:
- Interfaces, routes, and neighbors with ip
- Connections mapped to processes with ss
- Header and redirect checks with curl
- DNS comparison across resolvers with dig
- Attack surface baselining with nmap (authorized systems only)
Whether you are a SOC analyst, a sysadmin, or building blue team skills, these commands turn a vague alert into a clear picture. ⚡
📖 Read the full cheat sheet: https://www.xpert4cyber.com/2026/10/linux-networking-commands-cheat-sheet.html
Originally published on xpert4cyber.com.