OneStopLogs provides a script that is able to determine your machine's OS (Windows or Linux) and collect the logs accordingly.
OneStopLogs also provides a web application that is able to analyse and visualise the logs that were collected from the script.
Currently working OS versions:
Windows 10
Linux (Kali)
Linux (Ubuntu)
Youtube link: https://www.youtube.com/watch?v=0cq_lnETjkA
For installation:
The web application runs on python flask specifically python3
You are also required to pip3 install the following:
Flask
Werkzeug
Files(onestoplogs.bat & onestoplogs.ps1) in /Scripts must be in the same directory of your choosing
Windows:
Double click on the bat file
You will be prompted for UAC elevation twice, click yes both times
Files extracted will be in the same directory as the bat file. ({.bat Directory}/temp/logs/windows/{today's date})
*Windows Operating System automatically blocks scripts downloaded from the internet to help protect the computer. However, we have found a workaround and are able to unblock the script from bash.
*By default, Windows Operating System will set a user’s Execution-Policy to be restricted. This causes a problem for us as we are unable to run scripts on the machine. However, there is no need to manually change the Execution-Policy of the current user as we have found a way to bypass and elevate the Execution-Policy from restricted to remote access. After the execution of our scripts, we will demote the Execution-Policy of the user back to restricted.
Linux:
Open up a terminal in the directory where the .bat file is
chmod 777 onestoplogs.bat (to provide permissions to execute the script)
./onestoplogs.bat (run the script)
Files extracted will be in the same directory as the bat file. ({.bat Directory}/temp/logs/linux/{today's date})
*If you see the $'\r': command not found error. enter <sed -i 's/\r//g' onestoplogs.bat> into the terminal.
This is because Windows uses \r\n as the line terminator while Linux (and most other operating systems) use \n alone.
Once the logs have been extracted
Run the webapp.py
Open a web browser and type in 127.0.0.1:5000
Insert the file path of the logs into the text box ({.bat Directory}/temp/logs/{OS}/{today's date})
Tay Qi Wen Jordan
Poh Hong Yi
Poh Qi Xian Bryan
Lee Khai Liang Eugene