<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->

---
name: log-analysis
description: >-
  Log Analysis techniques covering analysis, hardening, monitoring, and
  defensive operations for log analysis environments. Includes 24 granular
  sub-techniques for comprehensive coverage.
domain: cybersecurity
subdomain: log-analysis
tags:
  - security
  - log-analysis
  - defensive
  - analysis
version: "1.0"
author: defconxt
license: AGPL-3.0
compatibility: Claude Code, GitHub Copilot, Cursor, and any agentskills.io-compatible agent.
metadata:
  technique_count: 24
---

# Log Analysis

## Overview

Log Analysis provides 24 granular techniques for securing, analyzing, and monitoring
log analysis systems. This domain covers both defensive hardening and active
monitoring approaches.

## Activation

This skill activates when queries involve log analysis topics including:
- Analysis and auditing of log analysis configurations
- Hardening and security best practices
- Monitoring and alerting for log analysis events
- Incident response for log analysis compromises

## Competencies

- Security assessment and vulnerability analysis
- Configuration hardening and baseline management
- Monitoring, logging, and alerting
- Incident detection and response
- Compliance verification and reporting

## Techniques

See the `techniques/` subdirectory for all 24 granular sub-techniques.

```bash
# List all techniques
ls skills/log-analysis/techniques/
```

## References

- NIST Cybersecurity Framework (CSF)
- CIS Controls v8
- OWASP Guidelines

## Quick Reference

| Aspect | Detail |
|--------|--------|
| Domain | Log Analysis |
| Techniques | 24 |
| Format | AgentSkills Specification |
| Author | defconxt |
