$
tail -f security.log
[23:41]
✓ SSH BRUTE — 45.33.32.156 blocked after 12 attempts
[23:42]
✓ CANARY — honeypot.db accessed (no breach — lure confirmed)
[23:43]
⚠ IDS — Suricata SID:2023476 triggered (SQL injection attempt)
[23:44]
✓ ATLAS — T1110.001 Brute Force logged and mitigated
$