Analyzing Linux Audit Logs for Intrusion
Parse auditd logs to detect file access violations, privilege escalation, suspicious syscalls, and unauthorized process execution.
Parse and analyze Linux auditd logs to detect intrusion indicators including unauthorized file access, privilege escalation, syscall anomalies, and suspicious process execution using ausearch and Python.
npx skillmds@latest add autohandai-community-skills/analyzing-linux-audit-logs-for-intrusion Parse auditd logs to detect file access violations, privilege escalation, suspicious syscalls, and unauthorized process execution.
autohandai/community-skills/tree/main/analyzing-linux-audit-logs-for-intrusion commit 7b83d6646d