Are there any tools to monitor ssh logs at
/var/log/secure and report activity?
I am looking for some tools that will proactively tell me about user actions and highlight malicious activity.
I don’t want write a cron based log tool since I am unaware of the umpteen edge cases.
FYI, I use CentOS