System
SSH Authentication Logs
SSH authentication logs can reveal accepted login events, usernames, source addresses, and remote access patterns.
Metadata
- id:
system.ssh-auth-logs - category:
system - sensitivity:
low - artifact types:
history - tags:
ssh,logs,authentication
Path Matchers
| Path | Kind | Platforms |
|---|---|---|
/var/log/auth.log | file | linux |
/var/log/secure | file | linux |
Impact
discovery