authlog-watch
A local SSH authentication-log review tool with readable event summaries and summary-only output.
Focused Linux log review with unit-tested behavior.
Focus
This small utility makes SSH authentication events easier to inspect from a local log file. Summary-only output helps review recurring activity without requiring a long event listing.
Engineering role
It is a focused parser and reporting exercise in a security context. The repository contains usage examples, sample input and unit tests.
Boundaries
It does not block connections, manage identities or establish whether a login was authorized. Those decisions require context beyond a log summary.