Log Analysis for Security

Your servers, web shop and firewall already record everything an intruder does. The hard part is turning those files into answers. This book shows how to read authentication, web and network records with Python and pandas: parse text and structured formats, fix time zones and clock drift, learn what normal looks like, and write detection rules for password guessing, password spraying, web scanning...