log-forensics

🐺 Arctic Wolf's Last Stand: Official Season 2 Writeups for the Tundra Realm Cyber Defense Gauntlet. Log analysis, digital forensics, and threat hunting in a frozen cybersecurity battleground.

Linux log analyzer

An automatic reserved engineering threats detection tool “FLUKS”. The tool optimizes and extracts intelligent threat modules using a special designed machine learning algorithm technique, which allows forensic experts to visualize and explore different threats monitored by firewall, IDS/IPS and anti-virus server attacks. When a content of a file…

本机日志取证层：每条结论带行号出处、可重读原文自校验；拿不出因果链就说证据不足。零出网，附 MCP Server / Agent Skill。

From-scratch systemd journal (.journal) forensic reader — parse entries without journalctl/systemd, carve from unallocated space, and flag tampering (sequence gaps, timestamp regressions, truncation, online-state)