Insider threat is one of the most challenging security threats to detect because the attacker possesses legitimate access rights to the system. This research aims to analyze an insider attack scenario that exploits legal access through the Secure Shell (SSH) service in the process of data acquisition and privilege escalation on a Linux system. The research method involves simulating insider act…