Python Security Log Analyzer

Project Overview

This project is a Python-based security log analyzer that processes authentication logs, detects suspicious login activity, and generates a security report. It simulates a basic SOC analyst workflow by identifying repeated failed login attempts that may indicate a brute-force attack.

Technologies Used

• Python 3
• Visual Studio Code
• File Handling
• Collections (Counter)
• GitHub

Features

• Reads security log files
• Counts INFO, WARNING, and ERROR events
• Detects repeated failed login attempts
• Identifies suspicious IP addresses
• Detects possible brute-force attacks
• Generates an analysis report automatically

Skills Demonstrated

• Python Programming
• Log Analysis
• Security Monitoring
• Threat Detection
• File Processing
• Incident Analysis

Project Files

• log_analyzer.py – Main Python application
• sample_log.txt – Sample authentication log
• analysis_report.txt – Generated security report

Outcome

Screenshots

Program Execution

Generated Security Report

Final Successful Analysis

Conclusion

This project demonstrates practical cybersecurity skills by using Python to analyze authentication logs, detect suspicious login activity, and automatically generate security reports. It reflects a common SOC analyst workflow and highlights my ability to use scripting and log analysis to identify potential security threats. This project demonstrates the ability to automate basic security log analysis using Python and produce actionable security findings similar to tasks performed by entry-level SOC analysts.