a) Why are integrated log files good? b) Why are they difficult to create? c) Explain the

Question:

a) Why are integrated log files good?
b) Why are they difficult to create?
c) Explain the time synchronization issue for integrated log files.
d) How do companies achieve time synchronization?
e) What is event correlation?
f) Distinguish between aggregation and event correlation.
g) Why is analyzing log file data difficult?
h) In Figure 10-19, how long is the delay between the first attempted login and the second?
i) Does this indicate that the attack is a human attack or an automated attack?
Fantastic news! We've Found the answer you've been seeking!

Step by Step Answer:

Related Book For  book-img-for-question

Corporate Computer Security

ISBN: 978-0133545197

4th edition

Authors: Randy Boyle, Raymond Panko

Question Posted: