Sentry is an Intrusion Detection System that monitors server logs for failed login attempts and alerts administrators about potential threats.
- Log Parsing: Reads and analyzes server logs.
- Intrusion Detection: Detects failed login attempts.
- Alert System: Sends notifications when a threshold is exceeded.
-
Clone the repo:
git clone https://github.com/vixhnuchandran/Sentry.git cd Sentry
-
(Optional) Install the project locally:
pip install -e .
Modify Sentry/config.py
:
- LOG_FILE_PATH: Log file path (default:
server_log.txt
). - ALERT_THRESHOLD: Alert threshold for failed logins (default:
5
).
Run the IDS:
python run_sentry.py