Python script to scan log files/system for unauthorized access around Linux systems
The script will quickly scan over log files in /var/log to find any attempts of unauthorized access on system. Add custom strings to flags and function isSecurityLog to customize the script to your specific environment. See example below:
To run this project, extract it to the /opt folder, allow executable permission then run it as sudo
sudo chmod 755 checkLogs.py
Keep in mind that the script can be automated with crontab :)
Simply just run the script checkLogs.py
sudo ./checkLogs.py
I made this script as a class project in security python class as a blue team tool that can be used to help identify unauthorized access around the system.