Gryphlog

Gryphlog is a server security auditing application that helps
administrators understand who did what on their systems, and
prove that the records of those actions have not been altered.

Key capabilities:

• Session attribution: links commands, file changes, and system

activity back to the user session that caused them, so every
action can be traced to a responsible account.

• File integrity monitoring: watches critical files and

directories and reports unexpected additions, modifications,
or deletions.

• Tamper-evident audit records: stores audit events in a way that

makes any modification or removal of past entries detectable,
supporting forensic review and compliance requirements.

Gryphlog is built for system administrators, security engineers,
and teams that need reliable, verifiable audit trails on Linux
servers.

Documentation and support: https://gryphlog.gokulraj.engineer