Log Monitoring and Login History Using Linux Log file

[jay13patel]

Problem : Currently, the App project has no log monitoring and login history

Solution:- By using capabilities of log files generated by every OS, especially in Linux log files are generated by that we can monitor every step which user can notify if anyone used a pen drive or malicious device without the user permission and is injected in it with attacker have physical access to the system

[jay13patel]

@rejahrehim, can I work on the issue?

[rejahrehim]

@jay13patel you can start working on detecting and disabling/enabling external drives like a pen drive. @mishal23 is working on parsing system logs. I think you both can work together.

[jay13patel]

Ok I will collaborate with @mishal23 for the detection of malicious devices and also want to work on implementing netfilter firewall in this project and want to implement more security levels (like host based IDS/IPS) in it.

[rejahrehim]

Okay, stat with the log monitor now.

[adeyosemanputra]

Its good ideas @rejahrehim @jay13patel to detect malicious device like bad usb, usb rubber ducky and bash bunny https://github.com/hak5/bashbunny-payloads/

[jay13patel]

67 Feature: Detection of malicious devices

[abhisharma404]

@rejahrehim @adeyosemanputra This issue can be closed, as PR #126 implements everything.