Lorg
An advanced Apache logfile security analyzer for post-attack forensics, detecting web application attacks using multiple detection techniques.
What is Lorg?
LORG is an Apache logfile security analyzer designed for post-attack forensic investigations of web applications. It parses HTTPD logfiles (like Apache's access_log) to detect, group, and classify web attacks using signature-based, statistical, and machine learning techniques. The tool helps security professionals reconstruct attack sequences and identify compromised applications from large, complex log data.
Security professionals, forensic analysts, and system administrators responsible for investigating web application breaches or performing security audits on Apache-based web servers.
Developers choose LORG for its multi-faceted detection approach that goes beyond simple log parsing, offering session-based analysis, attack quantification, and integration of geolocation/DNSBL data to provide a comprehensive forensic picture unavailable in basic log analysis tools.
Overview
Apache Logfile Security Analyzer
Use Cases
Best For
- Investigating web application breaches by analyzing Apache access logs
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
