executing-plans
executing-plans
Use when executing an implementation plan in the current session as the implementer yourself — your human partner chose inline execution, or no subagent tool is available
Explore skills
Productivity · SKILL.md
analyzing-linux-audit-logs-for-intrusion
analyzing-linux-audit-logs-for-intrusionParse and analyze Linux auditd logs to detect intrusion indicators including unauthorized file access, privilege escalation, syscall anomalies, and suspicious process execution using ausearch and Python.
Independent GitHub snapshot · Automated classification · Original documentation governs
Skill documentation
GitHubname: analyzing-linux-audit-logs-for-intrusion description: > Parse and analyze Linux auditd logs to detect intrusion indicators including unauthorized file access, privilege escalation, syscall anomalies, and suspicious process execution using ausearch and Python. domain: cybersecurity subdomain: log-analysis tags: [auditd, linux-forensics, syscall-monitoring, intrusion-detection] version: "1.0" author: mahipal license: Apache-2.0
Analyzing Linux Audit Logs for Intrusion
Parse auditd logs to detect file access violations, privilege escalation, suspicious syscalls, and unauthorized process execution.