trailscraper

Extract and analyze valuable information from AWS CloudTrail logs

brewmacoslinux
Try with needOr install directly
Source

About

Tool to get valuable information out of AWS CloudTrail

Commands

trailscraper

Examples

Filter CloudTrail events by event name$ trailscraper filter --event-name CreateSecurityGroup cloudtrail.json
Get all events for a specific IAM principal$ trailscraper filter --principal-id AIDACKCEVSQ6C2EXAMPLE cloudtrail.json
Export CloudTrail data to CSV format for analysis$ trailscraper filter --output csv cloudtrail.json > events.csv