Parse Apache and Nginx access logs to detect SQL injection attempts, local file inclusion, directory traversal, web scanner fingerprints, and brute-force patterns. Uses regex-based pattern matching against OWASP attack signatures, GeoIP enrichment for source attribution, and statistical anomaly detection for request frequency and response size outliers.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-web-server-logs-for-intrusionnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-web-server-logs-for-intrusion -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill analyzing-web-server-logs-for-intrusion -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/analyzing-web-server-logs-for-intrusiongh skill install mukul975/Anthropic-Cybersecurity-Skills analyzing-web-server-logs-for-intrusiongit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-web-server-logs-for-intrusion ~/.claude/skills/analyzing-web-server-logs-for-intrusion # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/analyzing-web-server-logs-for-intrusion ~/.agents/skills/analyzing-web-server-logs-for-intrusion # Codex, Cursor, Gemini CLI, Copilot, OpenCode