Logs Risk Scanner

The easiest way to scan a local folder that contains log files for secrets, PII, and non-inclusive language.

This fully-functional solution uses the BluBracket CLI to do the risk detection heavy lifting, combined with open-source helper code written in Python to interact with CLI.

This tool runs entirely locally. Installation is almost as easy as cloning the repo, and you should have a working POC in minutes.

Installation

1. Install the BluBracket CLI (see below)
2. Clone or download this repo
3. pipenv sync inside the repo to install Python dependencies

Requires Python3 and pip, but you probably already have those.

Install the BluBracket CLI

The BluBracket CLI is a high-performance, compact risk scanner written in Go. Unlike some tools, it runs entirely locally without sending any data to remote hosts (unless explicitly configured otherwise).

macOS, multiple Linux distros, and Windows are all supported.

Use these direct links to download the executables:

• macOS: https://static.blubracket.com/cli/latest/blubracket-macos
• Linux: https://static.blubracket.com/cli/latest/blubracket-linux
• Windows: https://static.blubracket.com/cli/latest/blubracket-win.exe

For example, to download and run the latest BluBracket CLI on macOS, you could run:

curl https://static.blubracket.com/cli/latest/blubracket-macos -o blubracket
chmod +x ./blubracket
mv ./blubracket /usr/local/bin/

Usage

pipenv sync 
pipenv run python logs_risk_scanner.py my-logs-directory

To see more options pipenv run python logs_risk_scanner.py --help

Modifying and contributing

This Apache-licensed project is open for re-use and improvements by all. Please open an issue or pull request if you find any bugs or see an opportunity for improvement.

Hit us up on Twitter at @BluBracket to tell us how you're using it!