theairship/loggrjack

Log parsing, analysis, and geolocation tool for incident responders.

loggrjack's Issues

Update readme with Python-specific markdown

Minor update to readme to increase readability.

Modularize log parsers

Break out log parsers into standalone python files that pass parsed data back to the main script. Makes it easier to organize and understand the overall function.

Add parser for Debian authentication logs

Create differentiation between successful and failed events

Some log types (e.g. Microsoft 365 "User Logged In") will only list successful events, but that is not the case for all log types. Being able to differentiate between and report on successful and failed events will be very important for some logs.