Stats
Actions
Tags
Analyzes Linux auditd logs using ausearch and Python to detect intrusions including unauthorized file access, privilege escalation, syscall anomalies, and suspicious process execution.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersecurity-skills-zh:analyzing-linux-audit-logs-for-intrusionThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
解析 auditd 日志，检测文件访问违规、权限提升（privilege escalation）、
解析 auditd 日志，检测文件访问违规、权限提升（privilege escalation）、 可疑系统调用（syscall）以及未授权进程执行。
npx claudepluginhub killvxk/cybersecurity-skills-zhAnalyzes Linux audit logs (auditd) with ausearch and aureport to detect intrusions, privilege escalation, and unauthorized access. Helps configure rules, query logs, and reconstruct timelines.
Uses auditd, ausearch, and aureport to detect intrusions, unauthorized access, and privilege escalation on Linux hosts. Covers rule configuration, log querying, timeline reconstruction, and SIEM integration.
Analyzes Linux audit logs using auditd, ausearch, and aureport to detect intrusions, unauthorized access, privilege escalations, and suspicious activity. For incident response, forensics, and HIDS on Linux hosts.