Logging, Correlation and IT Search: An Analogy
...weekday, by any user. If the toaster saw something happening, we would know immediately and could take appropriate actions- maybe call the police to notify them of a break-in
Now, back to the network. Now that you have an idea of how we can use logs and events in the house to identify whats going on and spot abnormal activity, we can port...
