🛡️ ProcessGuard — Rogue Process Monitor for Linux

ProcessGuard is a lightweight, cron-compatible Bash script that monitors your Linux system for suspicious or rogue processes—ideal for system administrators, junior Linux engineers, or cloud engineers looking to improve operational visibility.

📌 Features

• Detects potentially dangerous or unauthorized processes (e.g. nmap, hydra, nc, sshpass, msfconsole, cryptominer)
• Logs suspicious activity with timestamps
• Automatically rotates and deletes logs older than 7 days
• Easy to automate using cron or systemd timers

🔧 How It Works

1. Scans running processes using ps
2. Matches against a customizable list of suspicious keywords
3. Logs findings to ~/processguard/logs/
4. Maintains a cron log at ~/processguard/processguard_cron.log

🚀 Installation & Usage

git clone https://github.com/YOUR_USERNAME/processguard.git
cd processguard
chmod +x processguard.sh
./processguard.sh