Threat Detection with Python

This script demonstrates basic log parsing for brute-force detection based on repeated failed SSH login attempts.

Files

• log_parser.py: Python script to parse logs and detect brute-force patterns.
• sample_logs.txt: Simulated syslog entries for SSH login attempts.

How to Run

python log_parser.py

Use Cases

• Early brute-force detection
• Pattern analysis for failed logins
• Entry-level SIEM rule emulation

This can be extended to include ML classification, log enrichment, or real-time alerting.

Potential Brute Force Attempts:

• 192.168.1.100: 3 failed attempts