Detects SSH brute force, username spraying and suspicious logins in auth logs. Mapped to MITRE ATT&CK, with Sigma rules. Python, tested.
python ssh log-analysis cybersecurity sigma soc blue-team mitre-attack threat-detection detection-engineering detection-testing
-
Updated
Oct 15, 2026 - Python