This project aims to develop an RPA solution that automatically extracts system security logs, identifies suspicious login attempts or unusual activities based on predefined rules, and generates real-time alert reports. The system enhances cybersecurity monitoring efficiency and reduces manual log inspection workload.
Study cybersecurity log monitoring processes.
Identify repetitive log analysis tasks.
Design automation workflow diagram.
Develop RPA bot to extract logs from system files or dashboards.
Define rules for suspicious activity detection (e.g., multiple failed logins).
Automate filtering and classification of log entries.
Generate alert notifications for abnormal behavior.
Store flagged incidents in structured database.
Create daily security summary reports.
Implement exception handling for incomplete logs.
Test automation using simulated log datasets.
Evaluate detection accuracy and time savings.
Document system architecture and limitations.
