linux-syslog

Splunk project analyzing simulated Linux syslog data to detect brute-force login attempts, error rate anomalies, escalated warnings, and correlated security events. Demonstrates advanced SPL, time-window correlation, lookup-based classification, and real-world SOC/SRE insights through storytelling dashboards.

Cross-platform Python log analysis tool for Windows Event Logs and Linux syslogs with brute force, privilege escalation, and suspicious process detection.