skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

blue-log-review

Searches, filters, and correlates security-relevant data from multiple log sources.

Updated Jul 30, 2026
Search Tags:#forensics#incident-response#threat-hunting#security-analysis#blue-team#log-review
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill blue-log-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: blue-log-review
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/blue-log-review
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill blue-log-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the complexity of manual log analysis by providing a structured, gated, and repeatable framework for identifying security anomalies while ensuring evidence discipline and data privacy.

Core Features & Use Cases

  • Security Event Correlation: Systematically correlates authentication, process, and network logs to identify attack chains like brute force, lateral movement, or C2 beaconing.
  • Evidence Discipline: Enforces strict redaction of PII and sensitive data before outputting findings, ensuring compliance and privacy.
  • Use Case: During an incident response scenario, use this skill to parse raw firewall and EDR logs to identify the scope of a potential lateral movement attempt while maintaining a clean, audit-ready ledger of findings.

Quick Start

Use the blue-log-review skill to analyze the provided security logs from the last 24 hours for any signs of unauthorized lateral movement or credential abuse.

Frequently Asked Questions about blue-log-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform defensive log review for incident response and threat hunting?▼

Defensive log review systematically searches, filters, and correlates security-relevant events from diverse logs to identify attack chains during incident response and threat hunting.

What is the best way to correlate security logs to detect lateral movement?▼

Correlating security logs systematically links authentication, process, and network logs to identify attack chains like lateral movement, brute force, or C2 beaconing.

How do I maintain evidence discipline and redact PII during forensic log analysis?▼

Forensic log analysis enforces evidence discipline by applying strict authorization gates, read-only access protocols, and mandatory redaction of sensitive information before outputting findings.

Can I analyze firewall and EDR logs within a specific time window for security monitoring?▼

You can parse raw firewall and EDR logs within defined time windows and scope boundaries to identify the scope of potential lateral movement during routine security monitoring.

Does structured log analysis require strict authorization gates for blue team operations?▼

Structured log analysis for blue team operations requires adherence to strict authorization gates and read-only access protocols to ensure compliance and maintain an audit-ready ledger.

Related Skills

Explore More Data & Analytics Skills→
nopkhunnopkhun

response-format

Standardize AI completion reports into three sections: What I Did, What You Get, What You Need To Do.

Community
Basic
taxueseektaxueseek
21

taxue-career-direction

Diagnose viable career directions by analyzing past activities and market demand.

Community
Intermediate
BenAIOSBenAIOS

youtube-outline

Generate a structured video outline from a video brief.

Official
Intermediate
shawnpangshawnpang
285

job-description

Generate startup job descriptions in Markdown using the HERO framework.

Community
Intermediate