Week 4 - Logging

Question 1

What is logging?

Answer 1

allows organizations to answer key questions during a cyber incident

e.g
What has happened?
What is the impact?
What actions should be taken next?

Question 2

What are the challenges in logging?

Answer 2

• Log generation
• Log security
• Log analysis

Question 3

What are some sources of log data?

Answer 3

• Application logs
• firewall logs
• system logs,

Question 4

Why is log generation challenging?

Answer 4

• High volume of logs
• Inconsistent formatting
• Multiple file types

Question 5

What types of sensitive information can logs contain?

Answer 5

• IP addresses
• Credentials
• GPS data