A while ago I stumbled upon a great article by Alex Henderson here about using Discord as a platform to receive notifications on SSH login activity. This was incredibly useful in a blue team CTF I took part in a few months ago, as it gave us real-time notifications of the red team’s activity on our systems. This allowed us to respond to incidents incredibly quickly. One issue we did face in the competition when using this method was that implementing it on the dozens of machines under our control took an incredibly long time, so during the competition I threw together a bash script that would perform all the necessary steps to get this working on a system.