Audit Logging
Reference-playbook for centraliseret audit-logging, SIEM-videresendelse og compliance-logopbevaring.
Testet · Virker
Hvad det gør
En reference playbook for implementing centralized audit logging: rsyslog/journald forwarding configs, a Python AuditLogger class med hash-chained tamper detection, Fluentd/Fluent Bit pipelines, an Elasticsearch ILM retention policy, and a SOC2/HIPAA/PCI-DSS/GDPR/FedRAMP retention-period table. Udløses, når implementing audit trails, SIEM integration, eller compliance-driven log retention. Leveres as copy-paste config and code rather than an installer or script to run.
Testrapport
Bad den om to add SOC2-compliant login audit logging to a Flask app and it pulled the bundled hash-chained AuditLogger class plus the exact SOC2/HIPAA/PCI-DSS retention figures (1yr/6yr/1yr) verbatim, well past the baseline's generic 'log to a file and forward to your SIEM' answer.
Testet: 2026-07-14 · Claude Code 2.x (agent harness)
Installation
git clone https://github.com/BagelHole/DevOps-Security-Agent-Skills cd DevOps-Security-Agent-Skills mkdir -p ~/.claude/skills cp -r compliance/auditing/audit-logging ~/.claude/skills/audit-logging
Kommandoer og eksempelprompter
/audit-loggingReference-playbook for centraliseret audit-logging, SIEM-videresendelse og compliance-logopbevaring.
Skills udløses af almindelige forespørgsler — ingen kommandoer at huske. Efter installationen aktiverer prompter som disse skillen (på engelsk):
Set up centralized audit logging with SIEM integration for SOC2.I need an audit trail for our app with a HIPAA retention policy.How do I configure log retention and monitoring for PCI DSS?