Audit Logs CYB/205

Audit Logs

Audit Logs Security Investigations are essential due to the practical self-evaluation exercises that can be gained and applied in both a formal and informal training environment. Various forms of pertinent information can be contained when conducting a security investigation including the user identification, date and time stamps, assessed files and networks and system configuration changes. The user identification aids in identifying an account user. Timestamps are essential in a security investigation being that at the end of your analysis you will want to create a timeline for all the systems that were compromised (Bradley, 2016). Viewing accessed files and networks provides a scope to determine the extent that...