计划执行与检查节点
executing-plans
按既定实施计划完成工作，保持过程检查和反馈。
探索技能
效率与协作 · SKILL.md
analyzing-linux-audit-logs-for-intrusion
analyzing-linux-audit-logs-for-intrusion【效率与协作】Parse and analyze Linux auditd logs to detect intrusion indicators including unauthorized file access, privilege escalation, syscall anomalies, and suspicious process execution using ausearch and Python.
独立 GitHub 快照 · 自动分类 · 以原作者文档为准
技能说明
GitHubname: analyzing-linux-audit-logs-for-intrusion description: > Parse and analyze Linux auditd logs to detect intrusion indicators including unauthorized file access, privilege escalation, syscall anomalies, and suspicious process execution using ausearch and Python. domain: cybersecurity subdomain: log-analysis tags: [auditd, linux-forensics, syscall-monitoring, intrusion-detection] version: "1.0" author: mahipal license: Apache-2.0
Analyzing Linux Audit Logs for Intrusion
Parse auditd logs to detect file access violations, privilege escalation, suspicious syscalls, and unauthorized process execution.