Harlow & Finch's logs drawn as security-camera footage: the website, the server and logins each record event lines into one central, locked log store; a film-strip timeline shows recorded stretches, one unrecorded gap that is a blind spot, and a magnifier looking back at a past moment; and a footage check that the logs are recorded, kept long enough, in one searchable place and protected from tampering — with the two traps, 'nothing's wrong, so why keep logs?' and 'we've got logs somewhere', crossed out.

CY-BEGINNER-100Beginner · SIEM Engineering

The Footage — Keeping Records So You Can Look Back

Your systems' logs are their footage — the recorded evidence of what happened. Without it you're blind, live and afterwards. So keep good footage: record the things that would matter if something went wrong, keep it long enough, in one place you can search, and protected from tampering — so that when something goes wrong, you can look back and know.

11 hours8 chapters32 lessons225 activities8 labs

What you'll learn

See your systems' logs as their footage — and know that if something isn't recorded, you can't see it, live or later.
Record the things that would matter if something went wrong (who, what, when), and keep footage long enough for late-surfacing problems.
Bring logs into one place you can search, and protect the footage from an attacker wiping it.
See through the traps of 'nothing's wrong, so why keep logs?' and 'we've got logs somewhere'.

Price:৳5,000