mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-07-23 21:21:00 +03:00
19 lines
626 B
Markdown
19 lines
626 B
Markdown
---
|
|
name: analyzing-linux-audit-logs-for-intrusion
|
|
description: >
|
|
Parse and analyze Linux auditd logs to detect intrusion indicators
|
|
including unauthorized file access, privilege escalation, syscall
|
|
anomalies, and suspicious process execution using ausearch and Python.
|
|
domain: cybersecurity
|
|
subdomain: log-analysis
|
|
tags: [auditd, linux-forensics, syscall-monitoring, intrusion-detection]
|
|
version: "1.0"
|
|
author: mahipal
|
|
license: Apache-2.0
|
|
---
|
|
|
|
# Analyzing Linux Audit Logs for Intrusion
|
|
|
|
Parse auditd logs to detect file access violations, privilege escalation,
|
|
suspicious syscalls, and unauthorized process execution.
|