Log Searching and Response
Nicholas Oles · Apress eBooks · 2023
This chapter explores log records on a local machine and from a centralized repository. This section is useful to home techies, security analysts, and technicians working in corporate environments that might ingest and store log sources from multiple devices for correlation. Now might be a good time to start if you work in a corporate environment and aren’t storing log records. Tell your boss you have a great idea that pays huge dividends when an incident occurs. First, let’s discuss local logs that are stored natively on Windows devices and then discuss searching using common log repository tools.