MOHAMED EL KHAIR

Detail-oriented Web Developer transitioning into Cybersecurity with a strong foundation in secure coding, threat detection, and system protection. Completed the Google Cybersecurity Professional Certificate, gaining hands-on experience in SIEM tools, network security, log analysis, and incident response. Bringing 3+ years of experience building and maintaining web applications, with an emphasis on secure development practices, now seeking an entry-level cybersecurity analyst/engineer role to apply technical expertise in safeguarding systems and data.

Google Cybersecurity Professional Certificate

Linux Authentication Log Monitor (Bash Security Script)🔐 Linux Authentication Log Monitor (Bash Security Script)

• 📁 Personal Project | 🧠 Shell Scripting | Log Analysis | Linux Security
  Built a shell script to monitor failed login attempts from /var/log/auth.log. Extracts top IPs and usernames, color-codes alerts, logs to a file, and automates hourly scans using cron. Highlights shell scripting, log parsing, and Linux system security.
  
  🛠️ What It Does:
  ✅ Parses auth.log to detect "authentication failure" entries
  ✅ Extracts the top 5 offending IPs and usernames attempting unauthorized access
  ✅ Displays the latest suspicious login attempts with timestamps
  ✅ Uses color-coded output for visual alerts (red = warning, green = safe)
  ✅ Logs all detections to a local file /home/mohamed/login_monitor.log
  ✅ Runs automatically every hour using a self-installing cron job
  
  🧪 Technologies Used:
  🐧 Bash (Shell scripting)
  📂 Linux system logging
  🔍 grep, awk, sort, uniq, cron
  🎨 Terminal formatting with ANSI color codes
  
  🔒 Why It Matters:
  This project is a practical demonstration of Linux system monitoring and security log parsing, two critical skills in system administration and cybersecurity. It helps identify brute-force attempts or misconfigurations and lays the groundwork for integrating alerts, IP banning, or email notifications.
  
  ✅ This was a fun and hands-on way to strengthen my skills in:
  Bash scripting
  Working with system logs
  Automating with cron
  Security awareness & alerting
  📌 Planning to extend this with:
  Email alerts via msmtp
  Fail2ban-style auto-blocking
  JSON output for SIEM tools
  #bash #linux #cybersecurity #sysadmin #project #opensource #infosec #securitytools #loganalysis #crontab #automation

Check it out :

Linkedin link : https://www.linkedin.com/in/mohamed-elkhair/details/projects/
Github link : https://github.com/Simohjc/linux-auth-log-monitor