Audit Logging

Reference-playbook for centraliseret audit-logging, SIEM-videresendelse og compliance-logopbevaring.

Af BagelHole · BagelHole/DevOps-Security-Agent-Skills

Testet · Virker ★ 9.6/10

Audit Logging — Reference-playbook for centraliseret audit-logging, SIEM-videresendelse og compliance-logopbevaring.

Hvad det gør

En reference playbook for implementing centralized audit logging: rsyslog/journald forwarding configs, a Python AuditLogger class med hash-chained tamper detection, Fluentd/Fluent Bit pipelines, an Elasticsearch ILM retention policy, and a SOC2/HIPAA/PCI-DSS/GDPR/FedRAMP retention-period table. Udløses, når implementing audit trails, SIEM integration, eller compliance-driven log retention. Leveres as copy-paste config and code rather than an installer or script to run.

Testrapport

Bad den om to add SOC2-compliant login audit logging to a Flask app and it pulled the bundled hash-chained AuditLogger class plus the exact SOC2/HIPAA/PCI-DSS retention figures (1yr/6yr/1yr) verbatim, well past the baseline's generic 'log to a file and forward to your SIEM' answer.

Testet: 2026-07-14 · Claude Code 2.x (agent harness)

Installation

git clone https://github.com/BagelHole/DevOps-Security-Agent-Skills
cd DevOps-Security-Agent-Skills
mkdir -p ~/.claude/skills
cp -r compliance/auditing/audit-logging ~/.claude/skills/audit-logging

Kommandoer og eksempelprompter

  • /audit-loggingReference-playbook for centraliseret audit-logging, SIEM-videresendelse og compliance-logopbevaring.

Skills udløses af almindelige forespørgsler — ingen kommandoer at huske. Efter installationen aktiverer prompter som disse skillen (på engelsk):

  • Set up centralized audit logging with SIEM integration for SOC2.
  • I need an audit trail for our app with a HIPAA retention policy.
  • How do I configure log retention and monitoring for PCI DSS?