diff --git a/scripts/unauthorized b/scripts/unauthorized
new file mode 100755
index 000000000..1c6df0eb0
--- /dev/null
+++ b/scripts/unauthorized
@@ -0,0 +1,7 @@
+#!/bin/bash
+journalctl -u epicyon | grep 'getJson Unauthorized ' > .unauthorized.txt
+if [ ! -f .unauthorized.txt ]; then
+    echo 'No unauthorized events'
+else
+    cat .unauthorized.txt
+fi