Add 5 new cybersecurity skills batch 2 - oauth token theft, binary exploitation, STIX2 sharing, linux audit logs, timestomping detection

skills/analyzing-linux-audit-logs-for-intrusion/SKILL.md

@@ -0,0 +1,18 @@
+---
+name: analyzing-linux-audit-logs-for-intrusion
+description: >
+  Parse and analyze Linux auditd logs to detect intrusion indicators
+  including unauthorized file access, privilege escalation, syscall
+  anomalies, and suspicious process execution using ausearch and Python.
+domain: cybersecurity
+subdomain: log-analysis
+tags: [auditd, linux-forensics, syscall-monitoring, intrusion-detection]
+version: "1.0"
+author: mahipal
+license: Apache-2.0
+---
+
+# Analyzing Linux Audit Logs for Intrusion
+
+Parse auditd logs to detect file access violations, privilege escalation,
+suspicious syscalls, and unauthorized process execution.